2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800032804000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:53 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2815.828179][T29218] device team0 left promiscuous mode [ 2815.882489][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:53 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2815.956054][T29218] device team0 entered promiscuous mode [ 2815.966340][T29218] 8021q: adding VLAN 0 to HW filter on device team0 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800034804000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:53 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:53 executing program 4: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = socket(0x11, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x100000000, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00h\x00'}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 03:34:53 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2816.121290][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2816.161806][T29248] device team0 left promiscuous mode 03:34:54 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800034c04000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2816.182736][T29248] device team0 entered promiscuous mode [ 2816.214687][T29248] 8021q: adding VLAN 0 to HW filter on device team0 03:34:54 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2816.310756][T29248] device team0 left promiscuous mode 03:34:54 executing program 1: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000ce03011001000000000000040100000000"], 0x14}}, 0x0) 03:34:54 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:54 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2816.368342][T29261] device team0 entered promiscuous mode [ 2816.406729][T29261] 8021q: adding VLAN 0 to HW filter on device team0 03:34:54 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2816.503365][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2816.542685][T29268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:54 executing program 4: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = socket(0x11, 0x802, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x800, 0x20003f) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffff, 0x10000) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000200), &(0x7f0000000040)=0xff97) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'team0\x00\x10\x00h\x00', 0x1000}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 03:34:54 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:54 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2816.623309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2816.629182][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2816.635076][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800036004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:54 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x39) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x1, 0x281) sendmsg$nl_xfrm(r1, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000240)=@getae={0x1164, 0x1f, 0x402, 0x70bd26, 0x25dfdbfc, {{@in=@loopback, 0x4d6, 0xa, 0x6c}, @in=@remote, 0x1, 0x3504}, [@algo_auth_trunc={0xa8, 0x14, {{'sha512-avx2\x00'}, 0x2c8, 0xe0, "4e6b7543c2d8c7ea992d699f4b261ea63dceeff63a7cd87e2713e88dab0703714559ab7e713def36878208703632111854125057a848e6f9ada76c14264e54631977873517af9fdb421fd8659dde607629744ff83159eabaf9"}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@rand_addr=0x3, 0x0, 0x2}}, @algo_auth={0x1048, 0x1, {{'tgr192-generic\x00'}, 0x8000, "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"}}, @output_mark={0x8}]}, 0x1164}, 0x1, 0x0, 0x0, 0x80}, 0x40810) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x141400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x0, 0xfffffffeffffffff, 0x3, 0x9}, 0x6, 0x54, 0x9}) times(&(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 2816.780599][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:54 executing program 4: ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'team0\x00\x10\x00h\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x214, r2, 0xf00, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x158, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2, 0xa2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @loopback}, 0x7f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x53e2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffff1b7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc02c}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99f7}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 03:34:54 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) [ 2816.926329][T29312] device team0 left promiscuous mode 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800036804000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:54 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2816.972687][T29312] device team0 entered promiscuous mode 03:34:54 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) [ 2817.037355][T29312] 8021q: adding VLAN 0 to HW filter on device team0 03:34:55 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2817.082788][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2817.120900][T29326] device team0 left promiscuous mode 03:34:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xea7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000301ffff00000000000000000000000003714cb974350b0c2e2a2e1f958fa30ad0c6de745e7fda1896a70009a181bfff182566b2436dc50b3e012e0a5106bbfc6a40e11f360052501a6903ddc7020443c3691bb5a9b743045d89028522783b08429fbfbc2374617640978a919f86b0a11814f2f8b3319636160859000000000000000000000000000000"], 0x14}}, 0x0) [ 2817.136816][T29326] device team0 entered promiscuous mode [ 2817.172645][T29326] 8021q: adding VLAN 0 to HW filter on device team0 [ 2817.207736][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800036c04000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:55 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:55 executing program 3 (fault-call:15 fault-nth:0): fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:55 executing program 4 (fault-call:14 fault-nth:0): fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2817.342461][T29340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2817.365620][ T7935] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 03:34:55 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) [ 2817.439631][ T7935] CPU: 1 PID: 7935 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2817.447601][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2817.457693][ T7935] Call Trace: [ 2817.461016][ T7935] dump_stack+0x172/0x1f0 [ 2817.465385][ T7935] dump_header+0x10f/0xb6c [ 2817.469831][ T7935] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2817.475682][ T7935] ? ___ratelimit+0x60/0x595 [ 2817.480311][ T7935] ? do_raw_spin_unlock+0x57/0x270 [ 2817.485458][ T7935] oom_kill_process.cold+0x10/0x15 [ 2817.490606][ T7935] out_of_memory+0x79a/0x1280 [ 2817.495333][ T7935] ? lock_downgrade+0x880/0x880 [ 2817.500214][ T7935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2817.500236][ T7935] ? oom_killer_disable+0x280/0x280 [ 2817.500250][ T7935] ? find_held_lock+0x35/0x130 [ 2817.500275][ T7935] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2817.511763][ T7935] ? memcg_event_wake+0x230/0x230 [ 2817.511789][ T7935] ? do_raw_spin_unlock+0x57/0x270 [ 2817.511807][ T7935] ? _raw_spin_unlock+0x2d/0x50 [ 2817.511828][ T7935] try_charge+0x102c/0x15c0 [ 2817.521245][T29353] FAULT_INJECTION: forcing a failure. [ 2817.521245][T29353] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.522153][ T7935] ? find_held_lock+0x35/0x130 [ 2817.522189][ T7935] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2817.522203][ T7935] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2817.522216][ T7935] ? find_held_lock+0x35/0x130 [ 2817.522231][ T7935] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2817.522260][ T7935] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2817.522285][ T7935] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2817.522303][ T7935] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2817.522322][ T7935] __memcg_kmem_charge+0x136/0x300 [ 2817.522344][ T7935] __alloc_pages_nodemask+0x437/0x7e0 [ 2817.608101][ T7935] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 2817.613852][ T7935] ? save_stack+0x45/0xd0 [ 2817.618219][ T7935] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2817.624063][ T7935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2817.630331][ T7935] ? debug_smp_processor_id+0x3c/0x280 [ 2817.635822][ T7935] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2817.642106][ T7935] alloc_pages_current+0x107/0x210 [ 2817.647256][ T7935] pte_alloc_one+0x1b/0x1a0 [ 2817.651802][ T7935] __pte_alloc+0x20/0x310 [ 2817.656187][ T7935] copy_page_range+0x1529/0x1f90 [ 2817.661190][ T7935] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2817.666952][ T7935] ? pmd_alloc+0x180/0x180 [ 2817.671396][ T7935] ? validate_mm_rb+0xa3/0xc0 [ 2817.676095][ T7935] ? __vma_link_rb+0x279/0x370 [ 2817.680896][ T7935] copy_process.part.0+0x568b/0x7980 [ 2817.686239][ T7935] ? __cleanup_sighand+0x60/0x60 [ 2817.686283][ T7935] _do_fork+0x257/0xfd0 [ 2817.695404][ T7935] ? fork_idle+0x1d0/0x1d0 [ 2817.695430][ T7935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2817.695443][ T7935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2817.695458][ T7935] ? do_syscall_64+0x26/0x610 [ 2817.695473][ T7935] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2817.695495][ T7935] ? do_syscall_64+0x26/0x610 [ 2817.726286][ T7935] __x64_sys_clone+0xbf/0x150 [ 2817.730993][ T7935] do_syscall_64+0x103/0x610 [ 2817.735619][ T7935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2817.741546][ T7935] RIP: 0033:0x4567da [ 2817.745461][ T7935] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2817.765088][ T7935] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2817.773527][ T7935] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004567da [ 2817.781527][ T7935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 03:34:55 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:55 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2817.789524][ T7935] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001cd1940 [ 2817.797661][ T7935] R10: 0000000001cd1c10 R11: 0000000000000246 R12: 0000000000000001 [ 2817.805668][ T7935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 2817.813741][T29353] CPU: 0 PID: 29353 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #34 [ 2817.821746][T29353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2817.831864][T29353] Call Trace: [ 2817.835199][T29353] dump_stack+0x172/0x1f0 [ 2817.839573][T29353] should_fail.cold+0xa/0x15 [ 2817.844244][T29353] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2817.845975][ T7935] memory: usage 307188kB, limit 307200kB, failcnt 2824 [ 2817.850089][T29353] ? ___might_sleep+0x163/0x280 [ 2817.857207][ T7935] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2817.861810][T29353] __should_failslab+0x121/0x190 [ 2817.861832][T29353] should_failslab+0x9/0x14 [ 2817.861851][T29353] kmem_cache_alloc_node_trace+0x270/0x720 [ 2817.861877][T29353] __kmalloc_node+0x3d/0x70 03:34:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x50000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e22, 0x0, @rand_addr="5c47b8b55171ce7c0c2e3c724d69bddd", 0xffffffffffffff81}}, [0x2, 0x6, 0x9, 0x9ec, 0x3ff, 0x1, 0x1, 0x9, 0x8001, 0x400, 0x2, 0x6, 0x0, 0x7fffffff, 0xffff]}, &(0x7f0000000140)=0x100) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800037404000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2817.870719][ T7935] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2817.874299][T29353] kvmalloc_node+0x68/0x100 [ 2817.874323][T29353] newseg+0x22c/0xe90 [ 2817.874343][T29353] ? shm_mmap+0x240/0x240 [ 2817.874366][T29353] ipcget+0xfe/0xd60 [ 2817.874384][T29353] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2817.874409][T29353] ? ipc_obtain_object_check+0xd0/0xd0 [ 2817.874430][T29353] __x64_sys_shmget+0x146/0x1d0 [ 2817.874444][T29353] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2817.874460][T29353] ? ksys_shmget+0x150/0x150 [ 2817.874475][T29353] ? do_syscall_64+0x26/0x610 [ 2817.874502][T29353] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2817.881937][ T7935] Memory cgroup stats for /syz2: cache:0KB rss:257052KB rss_huge:235520KB shmem:72KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:257056KB inactive_file:4KB active_file:0KB unevictable:16KB [ 2817.884839][T29353] ? trace_hardirqs_on+0x67/0x230 [ 2817.884861][T29353] do_syscall_64+0x103/0x610 [ 2817.884882][T29353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2817.884894][T29353] RIP: 0033:0x458209 [ 2817.884910][T29353] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2817.884918][T29353] RSP: 002b:00007f073005ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2817.884940][T29353] RAX: ffffffffffffffda RBX: 00007f073005ec90 RCX: 0000000000458209 [ 2817.889718][ T7935] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14392,uid=0 [ 2817.896308][T29353] RDX: 0000000078000822 RSI: 0000000000004000 RDI: 0000000000000000 [ 2817.896318][T29353] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.896325][T29353] R10: 0000000020ffa000 R11: 0000000000000246 R12: 00007f073005f6d4 [ 2817.896333][T29353] R13: 00000000004c6480 R14: 00000000004db698 R15: 0000000000000009 [ 2817.933835][T29364] FAULT_INJECTION: forcing a failure. [ 2817.933835][T29364] name failslab, interval 1, probability 0, space 0, times 0 03:34:55 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2818.022098][ T7935] Memory cgroup out of memory: Killed process 14392 (syz-executor.2) total-vm:72712kB, anon-rss:2228kB, file-rss:35792kB, shmem-rss:0kB [ 2818.110111][T29364] CPU: 1 PID: 29364 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #34 [ 2818.120243][T29364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2818.130326][T29364] Call Trace: [ 2818.133640][T29364] dump_stack+0x172/0x1f0 [ 2818.138042][T29364] should_fail.cold+0xa/0x15 [ 2818.142669][T29364] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2818.142692][T29364] ? ___might_sleep+0x163/0x280 [ 2818.142712][T29364] __should_failslab+0x121/0x190 [ 2818.142730][T29364] should_failslab+0x9/0x14 [ 2818.142747][T29364] kmem_cache_alloc_node_trace+0x270/0x720 [ 2818.142765][T29364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.142788][T29364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.179693][T29364] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2818.179716][T29364] __kmalloc_node+0x3d/0x70 [ 2818.179737][T29364] kvmalloc_node+0x68/0x100 [ 2818.179760][T29364] newseg+0x22c/0xe90 [ 2818.179782][T29364] ? shm_mmap+0x240/0x240 [ 2818.179801][T29364] ? down_write+0x38/0x90 [ 2818.179819][T29364] ipcget+0xfe/0xd60 [ 2818.179846][T29364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.216257][T29364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.221780][T29364] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2818.227101][T29364] ? retint_kernel+0x2d/0x2d [ 2818.231726][T29364] ? ipc_obtain_object_check+0xd0/0xd0 [ 2818.237225][T29364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2818.242732][T29364] __x64_sys_shmget+0x146/0x1d0 [ 2818.247624][T29364] ? ksys_shmget+0x150/0x150 [ 2818.252269][T29364] ? ksys_shmget+0x150/0x150 [ 2818.256903][T29364] do_syscall_64+0x103/0x610 [ 2818.261565][T29364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2818.267516][T29364] RIP: 0033:0x458209 [ 2818.271438][T29364] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:34:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2818.291067][T29364] RSP: 002b:00007f494a10dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2818.299508][T29364] RAX: ffffffffffffffda RBX: 00007f494a10dc90 RCX: 0000000000458209 [ 2818.307511][T29364] RDX: 0000000078000822 RSI: 0000000000004000 RDI: 0000000000000000 [ 2818.315514][T29364] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2818.323538][T29364] R10: 0000000020ffa000 R11: 0000000000000246 R12: 00007f494a10e6d4 [ 2818.323547][T29364] R13: 00000000004c6480 R14: 00000000004db698 R15: 0000000000000007 [ 2818.346146][ T1043] oom_reaper: reaped process 14392 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 03:34:56 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800037a04000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:56 executing program 4 (fault-call:14 fault-nth:1): fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003fc04000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200), 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x2, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030005000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:34:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000200ffff46f000bc4ab1784bec467e00"], 0x14}}, 0x0) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/242) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000340)={0x2, &(0x7f0000000200)=[{}, {}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) syncfs(r1) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030006000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:34:57 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2819.443987][T31208] binder: release 12738:12739 transaction 87 out, still active [ 2819.451597][T31208] binder: unexpected work type, 4, not freed [ 2819.459617][T31208] binder: undelivered TRANSACTION_COMPLETE [ 2819.560621][T31208] binder: release 12738:12739 transaction 84 out, still active [ 2819.575115][T31208] binder: unexpected work type, 4, not freed [ 2819.581152][T31208] binder: undelivered TRANSACTION_COMPLETE [ 2819.625970][T31208] binder: release 12788:12789 transaction 90 out, still active [ 2819.634078][T31208] binder: unexpected work type, 4, not freed [ 2819.640090][T31208] binder: undelivered TRANSACTION_COMPLETE [ 2820.177749][ T3825] bridge0: port 1(gretap0) entered disabled state [ 2820.397324][ T3825] bond1 (unregistering): Released all slaves [ 2820.612977][ T3825] bond0 (unregistering): Released all slaves [ 2820.783305][ C0] net_ratelimit: 11 callbacks suppressed [ 2820.783311][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.795049][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.800854][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.806641][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.812490][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.818307][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.933419][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2821.812817][T29460] IPVS: ftp: loaded support on port[0] = 21 [ 2821.884781][T29460] chnl_net:caif_netlink_parms(): no params data found [ 2821.921916][T29460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2821.929519][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2821.937475][T29460] device bridge_slave_0 entered promiscuous mode [ 2821.946281][T29460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.953632][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 2821.961563][T29460] device bridge_slave_1 entered promiscuous mode [ 2821.981153][T29460] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2821.991957][T29460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2822.013443][T29460] team0: Port device team_slave_0 added [ 2822.020572][T29460] team0: Port device team_slave_1 added [ 2822.039754][T29460] device hsr_slave_0 entered promiscuous mode [ 2822.046610][T29460] device hsr_slave_1 entered promiscuous mode [ 2822.064926][T29460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2822.072277][T29460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2822.080033][T29460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2822.087228][T29460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2822.125239][T29460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2822.139375][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2822.149014][T30475] bridge0: port 1(bridge_slave_0) entered disabled state [ 2822.167842][T30475] bridge0: port 2(bridge_slave_1) entered disabled state [ 2822.176861][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2822.191229][T29460] 8021q: adding VLAN 0 to HW filter on device team0 [ 2822.202020][T31208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2822.211160][T31208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2822.218343][T31208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2822.244967][T19777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2822.255088][T19777] bridge0: port 2(bridge_slave_1) entered blocking state [ 2822.262303][T19777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2822.271261][T19777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2822.280583][T19777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2822.296888][T29460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2822.307994][T29460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2822.320934][T31208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2822.329066][T31208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2822.337908][T31208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2822.348054][T31208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2822.372162][T29460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2822.421984][T29465] FAULT_INJECTION: forcing a failure. [ 2822.421984][T29465] name failslab, interval 1, probability 0, space 0, times 0 [ 2822.436439][T29465] CPU: 0 PID: 29465 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #34 [ 2822.443426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2822.444472][T29465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.450343][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2822.460611][T29465] Call Trace: [ 2822.460642][T29465] dump_stack+0x172/0x1f0 [ 2822.460702][T29465] should_fail.cold+0xa/0x15 [ 2822.460721][T29465] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2822.460742][T29465] ? ___might_sleep+0x163/0x280 [ 2822.460767][T29465] __should_failslab+0x121/0x190 [ 2822.494709][T29465] should_failslab+0x9/0x14 [ 2822.499249][T29465] kmem_cache_alloc_trace+0x2d1/0x760 [ 2822.504692][T29465] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2822.510521][T29465] ? cap_capable+0x205/0x270 [ 2822.515423][T29465] resv_map_alloc+0x47/0x380 [ 2822.520167][T29465] hugetlbfs_get_inode+0x27/0x460 [ 2822.525235][T29465] hugetlb_file_setup+0x368/0x672 [ 2822.530493][T29465] newseg+0x4a4/0xe90 [ 2822.534508][T29465] ? shm_mmap+0x240/0x240 [ 2822.538967][T29465] ipcget+0xfe/0xd60 [ 2822.542901][T29465] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2822.548289][T29465] ? retint_kernel+0x2d/0x2d [ 2822.552895][T29465] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2822.558557][T29465] ? ipc_obtain_object_check+0xd0/0xd0 [ 2822.564403][T29465] ? retint_kernel+0x2d/0x2d [ 2822.569141][T29465] __x64_sys_shmget+0x146/0x1d0 [ 2822.573401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2822.574029][T29465] ? ksys_shmget+0x150/0x150 [ 2822.585620][T29465] ? __x64_sys_shmget+0x2e/0x1d0 [ 2822.590743][T29465] do_syscall_64+0x103/0x610 [ 2822.595359][T29465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2822.601271][T29465] RIP: 0033:0x458209 [ 2822.605190][T29465] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2822.625004][T29465] RSP: 002b:00007ff7e89fbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2822.633457][T29465] RAX: ffffffffffffffda RBX: 00007ff7e89fbc90 RCX: 0000000000458209 [ 2822.641466][T29465] RDX: 0000000078000822 RSI: 0000000000004000 RDI: 0000000000000000 [ 2822.649454][T29465] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2822.657784][T29465] R10: 0000000020ffa000 R11: 0000000000000246 R12: 00007ff7e89fc6d4 03:35:00 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:00 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200), 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:00 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x3, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030007000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) signalfd(r0, &(0x7f0000000000)={0xfffffffffffffffc}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x15}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 03:35:00 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2822.665785][T29465] R13: 00000000004c6480 R14: 00000000004db698 R15: 0000000000000007 03:35:00 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2822.748774][T29473] __nla_parse: 5 callbacks suppressed [ 2822.748786][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:00 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x2, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:00 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200), 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030011000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:00 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:00 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(0x0, 0x10401, 0x0) 03:35:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80100, 0x0) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x9, 0x6, 0x0, 0xffffffff7fffffff, 0x6, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301ffff0000000000d355ed167bca149c2b4299992c007f46c1d4d87cb5c9af88ab416c3e05036af7a151a82d"], 0x14}}, 0x0) 03:35:00 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:01 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x3, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2823.072581][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:01 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x5, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030012000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2823.245445][T29513] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 03:35:01 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2823.336844][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2823.368816][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:01 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2823.380393][T29513] CPU: 0 PID: 29513 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2823.388427][T29513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.398521][T29513] Call Trace: [ 2823.401860][T29513] dump_stack+0x172/0x1f0 [ 2823.406280][T29513] dump_header+0x10f/0xb6c [ 2823.410767][T29513] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2823.416623][T29513] ? ___ratelimit+0x60/0x595 [ 2823.421393][T29513] ? do_raw_spin_unlock+0x57/0x270 [ 2823.426716][T29513] oom_kill_process.cold+0x10/0x15 [ 2823.431975][T29513] out_of_memory+0x79a/0x1280 [ 2823.436745][T29513] ? lock_downgrade+0x880/0x880 [ 2823.441646][T29513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2823.448086][T29513] ? oom_killer_disable+0x280/0x280 [ 2823.453331][T29513] ? find_held_lock+0x35/0x130 [ 2823.458243][T29513] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2823.463925][T29513] ? memcg_event_wake+0x230/0x230 [ 2823.469097][T29513] ? do_raw_spin_unlock+0x57/0x270 [ 2823.474362][T29513] ? _raw_spin_unlock+0x2d/0x50 [ 2823.479283][T29513] try_charge+0x102c/0x15c0 [ 2823.483971][T29513] ? find_held_lock+0x35/0x130 [ 2823.489066][T29513] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2823.495016][T29513] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2823.500750][T29513] ? find_held_lock+0x35/0x130 [ 2823.505571][T29513] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2823.511185][T29513] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2823.516786][T29513] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2823.522038][T29513] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2823.527758][T29513] __memcg_kmem_charge+0x136/0x300 [ 2823.533060][T29513] __alloc_pages_nodemask+0x437/0x7e0 [ 2823.538567][T29513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2823.545159][T29513] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 2823.550931][T29513] ? copy_process.part.0+0x1d08/0x7980 [ 2823.556559][T29513] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2823.561892][T29513] ? trace_hardirqs_on+0x67/0x230 [ 2823.566982][T29513] ? kasan_check_read+0x11/0x20 [ 2823.572147][T29513] copy_process.part.0+0x3e0/0x7980 [ 2823.577431][T29513] ? __lockdep_free_key_range+0x120/0x120 [ 2823.583382][T29513] ? sched_clock+0x2e/0x50 [ 2823.587858][T29513] ? psi_memstall_leave+0x12e/0x180 [ 2823.593227][T29513] ? find_held_lock+0x35/0x130 [ 2823.598239][T29513] ? psi_memstall_leave+0x12e/0x180 [ 2823.603766][T29513] ? __cleanup_sighand+0x60/0x60 [ 2823.609020][T29513] ? perf_trace_lock+0xeb/0x510 [ 2823.613932][T29513] ? __lockdep_free_key_range+0x120/0x120 [ 2823.619756][T29513] _do_fork+0x257/0xfd0 [ 2823.623988][T29513] ? fork_idle+0x1d0/0x1d0 [ 2823.628541][T29513] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 03:35:01 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x5, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2823.634762][T29513] ? lock_downgrade+0x880/0x880 [ 2823.639769][T29513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2823.646148][T29513] ? blkcg_exit_queue+0x30/0x30 [ 2823.651213][T29513] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2823.656770][T29513] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2823.662275][T29513] ? do_syscall_64+0x26/0x610 [ 2823.666994][T29513] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2823.673103][T29513] ? do_syscall_64+0x26/0x610 [ 2823.677823][T29513] __x64_sys_clone+0xbf/0x150 [ 2823.682542][T29513] do_syscall_64+0x103/0x610 [ 2823.687169][T29513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2823.693094][T29513] RIP: 0033:0x45abd9 [ 2823.697016][T29513] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2823.717222][T29513] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2823.725784][T29513] RAX: ffffffffffffffda RBX: 00007f1368b66700 RCX: 000000000045abd9 03:35:01 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:01 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:01 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2823.733927][T29513] RDX: 00007f1368b669d0 RSI: 00007f1368b65db0 RDI: 00000000003d0f00 [ 2823.742113][T29513] RBP: 0000000000a4fcb0 R08: 00007f1368b66700 R09: 00007f1368b66700 [ 2823.750129][T29513] R10: 00007f1368b669d0 R11: 0000000000000202 R12: 0000000000000000 [ 2823.758143][T29513] R13: 0000000000a4fb5f R14: 00007f1368b669c0 R15: 000000000073bf0c [ 2823.963829][T29513] memory: usage 307196kB, limit 307200kB, failcnt 2854 [ 2824.011778][T29513] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2824.021196][T29513] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2824.050440][T29513] Memory cgroup stats for /syz2: cache:0KB rss:256976KB rss_huge:235520KB shmem:72KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:257072KB inactive_file:4KB active_file:0KB unevictable:16KB [ 2824.076361][T29513] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23843,uid=0 [ 2824.094444][T29513] Memory cgroup out of memory: Killed process 23843 (syz-executor.2) total-vm:72580kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB 03:35:02 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(0x0, 0x10401, 0x0) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030067000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:02 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x101000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x25dfdbff}, 0x14}}, 0x0) 03:35:02 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2824.112783][ T1043] oom_reaper: reaped process 23843 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2824.170226][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:02 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x10, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x406, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x68440, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0xfffffffffffffff7, 0x9, 0x8, 0x7c97, 0x9, 0x100000000, 0x5, 0x22, 0x2, 0x0, 0x8, 0xfff, 0x10001, 0x4, 0x4], 0x100000, 0x40}) sendmsg$nl_netfilter(r3, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030e80000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:02 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2824.362952][T29611] Unknown ioctl 1083223682 03:35:02 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x10, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(0x0, 0x10401, 0x0) 03:35:02 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x48, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2824.450569][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:02 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x48, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300016d0c00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2824.715751][T29611] Unknown ioctl 1083223682 03:35:02 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) 03:35:02 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x68, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2824.760883][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:02 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) 03:35:02 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030002000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2825.015308][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:02 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x68, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) 03:35:03 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030003000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2825.294650][T29703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:03 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030005000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2825.527161][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:03 executing program 1 (fault-call:14 fault-nth:0): fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030006000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030007000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:03 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x300, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:04 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:04 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x300, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:04 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030008000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2826.933276][ C1] net_ratelimit: 21 callbacks suppressed [ 2826.933286][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2826.944852][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.023510][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.029543][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.035480][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.041326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.047257][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.053066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.173326][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.846024][T29826] binder: release 7222:7256 transaction 43 out, still active [ 2829.013262][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2830.123690][T29829] IPVS: ftp: loaded support on port[0] = 21 [ 2830.322780][T29829] chnl_net:caif_netlink_parms(): no params data found [ 2830.434274][T29829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2830.474371][T29829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2830.482448][T29829] device bridge_slave_0 entered promiscuous mode [ 2830.511115][T29829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2830.529651][T29829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2830.537617][T29829] device bridge_slave_1 entered promiscuous mode [ 2830.701226][T29829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2830.712067][T29829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2830.730273][ T8059] IPVS: stopping master sync thread 7861 ... [ 2830.731488][T29829] team0: Port device team_slave_0 added [ 2830.744849][T29829] team0: Port device team_slave_1 added [ 2830.749130][ T8059] IPVS: stopping backup sync thread 24489 ... [ 2830.772899][T29829] device hsr_slave_0 entered promiscuous mode [ 2830.779799][T29829] device hsr_slave_1 entered promiscuous mode [ 2830.801621][T29829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2830.808759][T29829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2830.816192][T29829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2830.823321][T29829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2830.888163][T29829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2830.902977][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2830.912190][T29826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2830.921024][T29826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2830.929443][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2830.944809][T29829] 8021q: adding VLAN 0 to HW filter on device team0 [ 2830.967059][T29826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2830.977758][T29826] bridge0: port 1(bridge_slave_0) entered blocking state [ 2830.984921][T29826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2831.003914][T31208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2831.014204][T31208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2831.021294][T31208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2831.042138][T12212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2831.051103][T12212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2831.061394][T12212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2831.073590][T29829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2831.084879][T29829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2831.102814][T12212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2831.111993][T12212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2832.766379][ T8059] bond1 (unregistering): Released all slaves [ 2832.781777][ T8059] device hsr_slave_1 left promiscuous mode [ 2832.793823][ T8059] device hsr_slave_0 left promiscuous mode [ 2832.804924][ T8059] team0 (unregistering): Port device team_slave_1 removed [ 2832.819821][ T8059] team0 (unregistering): Port device team_slave_0 removed [ 2832.831544][ T8059] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2832.846900][ T8059] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2832.901287][ T8059] bond0 (unregistering): Released all slaves [ 2832.928600][T29829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2833.000364][T29833] FAULT_INJECTION: forcing a failure. [ 2833.000364][T29833] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.015222][T29833] CPU: 0 PID: 29833 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 2833.024258][T29833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2833.039420][T29833] Call Trace: [ 2833.042855][T29833] dump_stack+0x172/0x1f0 [ 2833.047927][T29833] should_fail.cold+0xa/0x15 [ 2833.055502][T29833] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2833.070597][T29833] ? ___might_sleep+0x163/0x280 [ 2833.078177][T29833] __should_failslab+0x121/0x190 [ 2833.086976][T29833] should_failslab+0x9/0x14 [ 2833.091918][T29833] kmem_cache_alloc_node_trace+0x270/0x720 [ 2833.097768][T29833] ? retint_kernel+0x2d/0x2d [ 2833.109802][T29833] __kmalloc_node+0x3d/0x70 [ 2833.115416][T29833] kvmalloc_node+0x68/0x100 [ 2833.119976][T29833] newseg+0x22c/0xe90 [ 2833.136355][T29833] ? shm_mmap+0x240/0x240 [ 2833.142002][T29833] ipcget+0xfe/0xd60 [ 2833.154279][T29833] ? wait_for_completion+0x440/0x440 [ 2833.172301][T29833] ? ipc_obtain_object_check+0xd0/0xd0 [ 2833.173341][ C1] net_ratelimit: 24 callbacks suppressed [ 2833.173351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.178186][T29833] ? fput_many+0x12c/0x1a0 [ 2833.178207][T29833] ? fput+0x1b/0x20 [ 2833.190124][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.198001][T29833] __x64_sys_shmget+0x146/0x1d0 [ 2833.198021][T29833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2833.198038][T29833] ? ksys_shmget+0x150/0x150 [ 2833.198053][T29833] ? do_syscall_64+0x26/0x610 [ 2833.198079][T29833] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2833.348930][T29833] ? trace_hardirqs_on+0x67/0x230 [ 2833.353986][T29833] do_syscall_64+0x103/0x610 [ 2833.358621][T29833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2833.364547][T29833] RIP: 0033:0x458209 [ 2833.368495][T29833] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2833.388129][T29833] RSP: 002b:00007f8fc8f60c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 2833.396559][T29833] RAX: ffffffffffffffda RBX: 00007f8fc8f60c90 RCX: 0000000000458209 [ 2833.404576][T29833] RDX: 0000000078000822 RSI: 0000000000004000 RDI: 0000000000000000 [ 2833.412562][T29833] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2833.420655][T29833] R10: 0000000020ffa000 R11: 0000000000000246 R12: 00007f8fc8f616d4 [ 2833.428672][T29833] R13: 00000000004c6480 R14: 00000000004db698 R15: 0000000000000008 [ 2833.438198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.445272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.452485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.459357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.466750][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.473474][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:11 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x500, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x500, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/cuse\x00', 0x2842, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x7, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0xee01, 0xee00, 0xee00]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000002c0)=[0xee01, 0xee00]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)={0x2a8, 0xffffffffffffffda, 0x7, [{{0x4, 0x2, 0x100, 0x1, 0x50, 0x1e, {0x2, 0x100000001, 0x6, 0x1, 0x10000, 0x8222, 0x8, 0x6, 0x1, 0x2, 0x3, r1, r2, 0x4, 0x7}}, {0x6, 0x0, 0xa, 0x4, '/dev/cuse\x00'}}, {{0x0, 0x0, 0x400, 0x26b0000000000, 0xfffffffffffffffe, 0x7ff, {0x0, 0x4, 0x10001, 0x2000000000, 0xac, 0x2e1, 0x7ff, 0x8, 0x80c9, 0x107a, 0x0, r3, r4, 0x3ff, 0x6}}, {0x5, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0x10000, 0xbf1b, 0x7, 0x3ed26d93, {0x3, 0x7f, 0x2, 0x0, 0x0, 0x5, 0x1, 0xfff, 0x8000, 0x9, 0x2, r5, r6, 0xfffffffffffffffa, 0x5}}, {0x3, 0x51, 0xa, 0xff, '/dev/cuse\x00'}}, {{0x2, 0x2, 0x2, 0x7, 0xffff, 0x5, {0x6, 0x2, 0x0, 0xffffffffffffffc0, 0x7fffffff, 0x5, 0x4, 0x3, 0x40, 0x3, 0x9, r7, r8, 0x27ef7033, 0x1}}, {0x6, 0x1, 0x4, 0x3, 'self'}}]}, 0x2a8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030011000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2833.554950][T29841] __nla_parse: 3 callbacks suppressed [ 2833.554961][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2833.573308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.579181][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:11 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x600, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x80000001}, 0x10) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet_buf(r0, 0x84, 0x20, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0xfffffffffffff6f6, 0x4) 03:35:11 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030012000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:11 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x2, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x600, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x3, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2833.913030][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x7, {{0xa, 0x4e24, 0xea, @mcast2, 0x1}}, {{0xa, 0x4e24, 0xab, @rand_addr="7f553110d2bc97095bec06dd98d13b19", 0x810a}}}, 0x108) socketpair(0xb, 0x3, 0x7fffffff, &(0x7f0000000600)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x39, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) 03:35:11 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x700, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030067000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000040)="4ec2663fd4e26c3a7eeddb2c7e93e68687f3634b8b16eb8b435ff0ef6f95e7968d5dcb9c30e09188e01088988028825517adad69721cfb3dea1d396bd1dbad11f081f0b676d2f5f73a004a83a20a5335e3c6ea0b02f3db", &(0x7f00000000c0)=""/129}, 0x18) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000340)={"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"}) close(r1) [ 2834.176353][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:12 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x700, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4800, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2834.263616][T29918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:12 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x5, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4800, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300800e0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x400) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004d80)={'dummy0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 2834.770636][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:12 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6800, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030000670000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:12 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6800, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2835.160190][T29999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2835.292861][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:13 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300040000000f0000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:13 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7400, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") getitimer(0x1, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00000013c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001400)={0x6, 0x8000, 0xed, 0x75, r3}, &(0x7f0000001480)=0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001180)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000011c0)=""/79) write$evdev(r1, &(0x7f0000000100)=[{{}, 0x1, 0x46, 0x200000000000002}], 0x18) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000012c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044011}, 0x80) write$evdev(r1, &(0x7f0000000040), 0x6c) r6 = accept$inet(r0, &(0x7f0000001440)={0x2, 0x0, @empty}, &(0x7f00000014c0)=0x22f) setsockopt$inet_dccp_buf(r6, 0x21, 0x8f, &(0x7f0000000180)="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", 0x1000) write$selinux_attr(r4, &(0x7f0000001240)='system_u:object_r:var_lib_t:s0\x00', 0x1f) 03:35:13 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x10, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7400, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000000100000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:13 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300040000001f0000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:14 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="42996341c001a2f0bbd4779aee3e1ce789fb980306175e83148d48f684475b3d359a944be2698ec3953702ce9b8243f5b7dad87edfd0f81b5d7f254c60a3141ecd809ad5764232efc4c4464fa8918b88c77a07212c1d71da1e79c22a3b671e97d2628ab05f6640f8b2071d60fcad50ebca683f9bd0c9ca5e3c76aa9db98dc037", 0x80}], 0x1}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x4, 0x80, "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", 0xed, 0x9, 0xea0000000000000, 0x0, 0x8001, 0x3, 0x9}, r3}}, 0x120) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 03:35:14 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x48, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004020000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:14 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x2000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2836.396194][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:14 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x2000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x8, 0x4) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000500)=@nl=@unspec, 0x1b, 0x0, 0x0, &(0x7f0000000880)=[{0x10}], 0x10}, 0x0) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004030000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:14 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x68, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x3000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x3000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2836.770981][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:14 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x2, 0x400000, 0xffd4) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x204200, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) 03:35:14 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2836.898301][T30163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:14 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x5000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004040000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 2: sysfs$1(0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000600)=""/55, &(0x7f0000000780)=0x37) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r0, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpgrp(0x0) setpriority(0x0, r1, 0x10000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0x5) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000009c0)='trusted.overlay.opaque\x00', &(0x7f0000000a00)='y\x00', 0xfffffffffffffd8b, 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x70, 0x6, 0xfffffffffffffffe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0xb454, 0x2, 0x0, 0x7fff, 0x32, 0x0, 0x7, 0xc3ac, 0x1, 0x0, 0xffffffffffffff7f, 0x7, 0x2, 0x5, 0x800, 0x397, 0x8, 0x72c, 0x0, 0x401, 0x7f, 0x4, 0x0, 0x5, 0x40, 0x5, 0x5, 0x40, 0x0, 0xa0, 0x4, @perf_bp={0x0, 0x2}, 0x4000, 0x401, 0x2, 0x8, 0xeeda, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x3, r2, 0xc) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x8) set_mempolicy(0x40000000007fff, &(0x7f00000002c0)=0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3b, &(0x7f0000000240)=0x1, 0x4) clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000440)='security.capability\x00'], 0x0) 03:35:15 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004050000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x5000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x300, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004060000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x500, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x10000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004070000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:15 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x48000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004080000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:16 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x600, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x10000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300040f0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:16 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x101000) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xa, "fe6af4782d6ce814fc0d"}, &(0x7f00000000c0)=0x2e) setsockopt$packet_int(r0, 0x107, 0x8000000f, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="030400000300600000000000fff55b4202938207d9fb3780398d537500e50600591f301ee616d5c01843e0650053c0e385472da70100af5ba514d40000efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000000d1843e770afd6e9ef5837dbd0000a4273015", 0x6c, 0x0, 0x0, 0x0) 03:35:16 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x68000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004100000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:16 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x700, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x48000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 2: syz_execute_func(&(0x7f0000000280)="3666440f50f564ff0941c366440f56c9c4c27d794e0066420fe2e3c441dfd04b00c442019dccd3196f") r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='user.syz\x00', 0x0, 0x0, 0x0) [ 2838.745210][T30371] __nla_parse: 7 callbacks suppressed [ 2838.745221][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:16 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4800, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2838.898622][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:16 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:16 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004280000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:17 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2839.216506][T30421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2839.260262][T30393] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2839.311834][T30393] CPU: 0 PID: 30393 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2839.319885][T30393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2839.319903][T30393] Call Trace: [ 2839.333405][T30393] dump_stack+0x172/0x1f0 [ 2839.337837][T30393] dump_header+0x10f/0xb6c [ 2839.342447][T30393] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2839.348338][T30393] ? ___ratelimit+0x60/0x595 [ 2839.353013][T30393] ? do_raw_spin_unlock+0x57/0x270 [ 2839.358268][T30393] oom_kill_process.cold+0x10/0x15 [ 2839.363450][T30393] out_of_memory+0x79a/0x1280 [ 2839.363478][T30393] ? lock_downgrade+0x880/0x880 [ 2839.363494][T30393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2839.363510][T30393] ? oom_killer_disable+0x280/0x280 [ 2839.363522][T30393] ? find_held_lock+0x35/0x130 [ 2839.363551][T30393] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2839.395209][T30393] ? memcg_event_wake+0x230/0x230 [ 2839.400286][T30393] ? do_raw_spin_unlock+0x57/0x270 [ 2839.405435][T30393] ? _raw_spin_unlock+0x2d/0x50 [ 2839.410328][T30393] try_charge+0x102c/0x15c0 [ 2839.413298][ C1] net_ratelimit: 20 callbacks suppressed [ 2839.413308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.414874][T30393] ? find_held_lock+0x35/0x130 [ 2839.414903][T30393] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2839.414928][T30393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2839.420652][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.426332][T30393] ? kasan_check_read+0x11/0x20 [ 2839.426354][T30393] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2839.426370][T30393] mem_cgroup_try_charge+0x24d/0x5e0 [ 2839.426390][T30393] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2839.426409][T30393] __handle_mm_fault+0x1e1f/0x3ec0 [ 2839.426435][T30393] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2839.480768][T30393] ? find_held_lock+0x35/0x130 [ 2839.485922][T30393] ? handle_mm_fault+0x322/0xb30 [ 2839.490908][T30393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2839.497197][T30393] ? kasan_check_read+0x11/0x20 [ 2839.502099][T30393] handle_mm_fault+0x43f/0xb30 [ 2839.506916][T30393] __do_page_fault+0x5ef/0xda0 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004480000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:17 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x68000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2839.511756][T30393] do_page_fault+0x71/0x581 [ 2839.516299][T30393] ? page_fault+0x8/0x30 [ 2839.520573][T30393] page_fault+0x1e/0x30 [ 2839.520588][T30393] RIP: 0033:0x40fc1f [ 2839.520610][T30393] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2839.528694][T30393] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 2839.528707][T30393] RAX: 00007f1368b04000 RBX: 0000000000020000 RCX: 000000000045825a [ 2839.528716][T30393] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2839.528725][T30393] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 2839.528734][T30393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 2839.528743][T30393] R13: 00007f1368b24700 R14: 0000000000000005 R15: 000000000073c04c [ 2839.664662][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.671293][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.678369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.684750][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.691809][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.698369][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.710197][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2839.754646][T30393] memory: usage 307140kB, limit 307200kB, failcnt 2917 [ 2839.761757][T30393] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2839.761767][T30393] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2839.761775][T30393] Memory cgroup stats for /syz2: cache:1044KB rss:255512KB rss_huge:233472KB shmem:1128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1124KB active_anon:255488KB inactive_file:4KB active_file:0KB unevictable:12KB [ 2839.761857][T30393] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10637,uid=0 [ 2839.813309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.820221][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x9, 0x3, 0x6}, &(0x7f00000003c0)=0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f00000002c0)={0x7, 0x15, 0x4}, 0x7) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000480)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) getgroups(0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) getresuid(0xffffffffffffffff, &(0x7f0000000440), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x40000, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:17 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfeffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6800, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300044c0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2839.941736][T30393] Memory cgroup out of memory: Killed process 10637 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB [ 2840.021905][T30464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:17 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfffffffe, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:17 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1ffffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2840.231401][T30474] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004600000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2840.321902][T30474] CPU: 1 PID: 30474 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2840.329958][T30474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2840.340049][T30474] Call Trace: [ 2840.343390][T30474] dump_stack+0x172/0x1f0 [ 2840.347764][T30474] dump_header+0x10f/0xb6c [ 2840.352222][T30474] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2840.358066][T30474] ? ___ratelimit+0x60/0x595 [ 2840.362710][T30474] ? do_raw_spin_unlock+0x57/0x270 [ 2840.365299][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2840.367865][T30474] oom_kill_process.cold+0x10/0x15 [ 2840.367886][T30474] out_of_memory+0x79a/0x1280 [ 2840.367905][T30474] ? lock_downgrade+0x880/0x880 [ 2840.367920][T30474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2840.367943][T30474] ? oom_killer_disable+0x280/0x280 [ 2840.403302][T30474] ? find_held_lock+0x35/0x130 [ 2840.408103][T30474] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2840.413688][T30474] ? memcg_event_wake+0x230/0x230 [ 2840.413715][T30474] ? do_raw_spin_unlock+0x57/0x270 [ 2840.413731][T30474] ? _raw_spin_unlock+0x2d/0x50 [ 2840.413749][T30474] try_charge+0x102c/0x15c0 [ 2840.413762][T30474] ? find_held_lock+0x35/0x130 [ 2840.413789][T30474] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2840.423987][T30474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2840.424008][T30474] ? kasan_check_read+0x11/0x20 [ 2840.424026][T30474] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2840.424044][T30474] mem_cgroup_try_charge+0x24d/0x5e0 [ 2840.424065][T30474] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2840.424087][T30474] __handle_mm_fault+0x1e1f/0x3ec0 [ 2840.424109][T30474] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2840.482701][T30474] ? find_held_lock+0x35/0x130 [ 2840.487562][T30474] ? handle_mm_fault+0x322/0xb30 [ 2840.492591][T30474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2840.498915][T30474] ? kasan_check_read+0x11/0x20 [ 2840.503837][T30474] handle_mm_fault+0x43f/0xb30 [ 2840.508665][T30474] __do_page_fault+0x5ef/0xda0 [ 2840.513507][T30474] do_page_fault+0x71/0x581 [ 2840.518065][T30474] ? page_fault+0x8/0x30 [ 2840.522362][T30474] page_fault+0x1e/0x30 [ 2840.526568][T30474] RIP: 0033:0x40fc1f [ 2840.530499][T30474] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2840.550135][T30474] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 2840.550151][T30474] RAX: 00007f1368b04000 RBX: 0000000000020000 RCX: 000000000045825a [ 2840.550158][T30474] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2840.550166][T30474] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 2840.550173][T30474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 2840.550180][T30474] R13: 00007f1368b24700 R14: 0000000000000008 R15: 000000000073c04c [ 2840.583838][T30474] memory: usage 307200kB, limit 307200kB, failcnt 2954 [ 2840.643369][T30474] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2840.650902][T30474] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2840.662717][T30474] Memory cgroup stats for /syz2: cache:1044KB rss:255420KB rss_huge:233472KB shmem:1128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1128KB active_anon:255480KB inactive_file:4KB active_file:0KB unevictable:12KB [ 2840.686031][T30474] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13720,uid=0 [ 2840.701746][T30474] Memory cgroup out of memory: Killed process 13720 (syz-executor.2) total-vm:72584kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB [ 2840.752192][ T1043] oom_reaper: reaped process 13720 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 03:35:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x9, 0x3, 0x6}, &(0x7f00000003c0)=0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f00000002c0)={0x7, 0x15, 0x4}, 0x7) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000480)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) getgroups(0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) getresuid(0xffffffffffffffff, &(0x7f0000000440), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x40000, 0x80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:18 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x100000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004680000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:18 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7400, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x200000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:18 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2841.031328][T30530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:19 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a00, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfeffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300046c0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2841.290755][T30567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:19 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x8, "d0703c7adbad83ae520556243b68e12f81cbe4ed1fbcd49f5edc6536326c1a80334c120eb8bf2602cebb681be9c1a12425aeab1e416d5c0b8a9c211aee19af866b7b062395dca774a06b3b3ec5437a600ba02e91f5389789e01fd9136954a89cc4205c1e6d7a30b427bd463169d33b4d8f3f10b2ecc899897043c4a650c516437fa260966ad27dba7b143130997ff56b79e2d344c5331df8e3ddad14c5e6c319b022a5b7ea6537771af57d9d71697e2e20c5c413bbd991a7b3db29b75dbab7f05aa9e9c13de1df3f1363ec6dbfaf270d9d33331335c1ece8ee9dbfb565027bd779f314e4ecc36fd676a8a0b89c71ea9be33c7b721ef2a27a4969087e7812c1f05e997baa27803c952a2dd108cbdb9d5ae083843c957243dd464cbb975c3f626cc88a0e30bc974df0836509e8335890ce1b4e2482bd44d8e43bf2a24be6bb86f885d36cb6ac7bbeac3dbe29b94e2cd4ff737df8654ecfd29607c62faf98606ce82f12bea7bdc78e58576e7eab9e749e9f7d78f2cbed9aaa0c316c6dd8583cc2a03fc6be34d464170072c2b0dc8148354d4c2e980f38993a8c18ca4bd4782ede5346627831165d830c45bcb7882db24cc85ba4ae652822945ea8780b57bc4e8c90e93f04458139717425869ccbaafe1b12f86b1d23478feba962a9708767945a49ea60e4d5a9154e7a8d9268e2d1264e7b58bf51f4c4dc8f7847cd1b75f905d75d7530ce07f5dcafc80dc106abd91de3b48b1de02252c7832d912cba6f1a863aa885339d15a08c184a690ece5bb0e845cb5aca8a1436bc0c1afa40fe7f03a680c0411cba26f005b02d2bcce4cb938cdb542f06435b7cc413938ad01538e0a166a56fb0f8d413d27d249b5eeb6a177990eeb414ffdd639266ec34bda5b018b9f5d2ec9086aa8b149c78c899875799f961e74febe500a2306fa29c93dd9ef631cea0c953522debe00edaf754081118f38ee9f475f36e69aee6642c1fd021ddd64f11e8b8c31cdf58d7bb1befaa742af79b1bcffaf2f00d1ac3e2b7ea2cec90c0429bb4590188f5c54967be94da09075c00d42bbea5a908c60e31573aa62ec8943ffe9efe763c59fb54a96dc56b8cdf7834f7223a4489e0878363a337786465900d3d5d74de1d03310696907e9a791e4193d8dbb947d3d78d7507e729c4345e2cbfbfbf6fae76d7a69383c29af99af0ee4263fdbd8ed819937ff997344a5ddd557c3aedabb16adbb95a3ec15bd8e0147dfc4728f3ec8e4757afc47056f548aa7ae65878c245bc74b182ea523da6d909a8871021101344ef64f9d86b6be46e121ff1e6bbbca1917c60dcad61c64d2bcacb30411ec1b9a1fcbd7615a12703a07284dcbefcb21cb035f7063ed2aacb6e957b76cd89db83b1b68965082789c702b1ed98dae28e2fc655241a35a467c6ad34c50e8eca4d683a223052613109685338e6af4736a4efbb078cd354ee0ec3d3e1155d9ba34c639e5fed5afd22781c27db6b081e37267fc5c352fba9e93f02226381a206a87b9726adefdb68400005010e798a7e39c08ef0e925070299500c955aaca8187e10637353661edb50de10f3a0c84bb793cbc483b4c85b8dba9ddf247bc0090858cecd03325fe6eb6b7bcbf2664f25817bc6088d1a5fa119d23fb2a630ef46412302d67b7881cb7c2b51bcaa808969c92cdb3603499f9124a4503678fbee7421edfe171e5690f4677d76fe2dcc31709ff11796cd737ae212748d911b19027290d2fb9080429ce43afb785be3278a4e625d10860fc553022ea1afe060fb12d5e7c5c88ed1f6c4c7b6c98105bdde0366d7e21c7a531a300a49b6391b8147c6d0a4bc29125969eef00073be30a0a930274553666842f736a876eccced461f7687d71929178cdf8734b293152c93e3a51d575faa038decf65799fc1b0a0c5d0e4db53cde6a97b7f7575f3d3f7ed42a99ab4616f44cbd6ea80f8ba0bc6bef6bd5bf6df2d755a40a382bfec4330245b588fd677d37ecd13538f5776905f4e933fa27013ac39ae01a90668942977310d2f0af05b0d279ae210c048e1725ebad98c2ec6686bbb45096c8982859efae13cd772862cc9f69f3d7b0ceb5c2555712aac9799993dea5dd24233e52696ad53c95ff5beb5217b70431c4873777a151648caf9b6f7270547573be2b6d99861df380edf990a367590b32d371287c16add0880f4485999cbd77119146ac70b9da8d062384cc57d8da48516f2cc3aa3e2dc51c1ffdb021d6171fcb5d3ed0ffb3ce9e34b751696648f06cb1f9bdd91a5ac36159f234e7a4c8e425bd3e5888a3656e42f30d5584592c9971248b4c456d01135fea87344f937a93ababc8a53104bce3465b74f3f694719c19f606e1143dc65665c7588fa6e2145e99c111a135776f060263bd7860c1c9b38305229300da4e2ccdbd7a092d161445cc1440e7556c28188c75e47a7f314b3f6818f25653c6381429d4d68080309aa39b52bd9b39318d48bd61d04af4609b6bc03dc63c11911b10052cdc417eed29923086fd41b388344bd1eef579c84aa9749d1504e3d0bed0fe18e1f40ee68ebb86b09b263aef9f7b437901f8ae369c306930f2f3a3ba3902d5f48f78b357c7e7591ce536aa273c052254506b815bc1a7e6dd72ce8be07fdf14cab0099f1731f41ae63178b0865b2017a164c0ca16031f1bff55c8880ec2bfe6b509c3b112ae6c86025f148bbf049da2bd9011cd87b5fbbc8be1543e92fef20303bce24c0d20abfe7ba12bb9752a6a5a390ae4b0ee50e5a24a9018ab9e50827c6311b073b53f2b616b7b5c81d13f5823576668c1202263d1b47424cc8811d718846135526c5787ef4aa144f01a86c87ec9b1d23efdb81d6bd8d44834053e25777cb889d185b7fa7c8650a3507fa9052be3f6dbe1f15166d7b43d8a8b59d874e1e493da5bff84fef90b66ae2d3cc06ce4cc900a57db85f8af5d606adbfd44f68eee437a924214410d8d5331450c250e3e6af4eb64066e7feb8be16d6d21c98d6aae04ecdaf4cb161c599b9d3c25669dd395b7a999437e8b004cbaa2a12d9d08f09fb1a84563b2c1962c909c74f9c79c4cecd98e8f08eb88b4d7728cd836fe3163bfdd8ec2ee5ecd1b88e820243e45cc9038ba0d4cb2561018af755e04d3cfedcbb32c3ecb55b6350b6089e8a14e04bfc46f706735cce2d99d85f6c7a2efd253b80ede9bb7549ab60f7d7d1956d044f51d73f8552ce6def3a0e65082582ee1dc2d45214178201216b62dea767dac744528da3a30ea924f6b7e81a9e3a42aced5d2e85dff08f8069633ecf524e0f781f00057c90e5a8d4ac36712fdbc01f474d495b8a3108b87752893011bfca30c8b8db4efbe8e6ff2de80014a549042d72735146a473569523001b071892320f556155f58a47db5259d3fb4325e7e6efaf565b6b48ac69028fe043b9b72f49141a8e182f29860dee1931bf289203456aefb9c91dc658ce557ef44a59a0d1cb4143b2086b42a5ee9839544aa8d577400a41e5a96414159247ea770f7492826e55ff4e68f2f73f655cf74d235602812f6640deb75ce322279e33968dcfd9a8287a78d7510491fab236d505741f1d1bcac54c248f8d95644624c92dc6f411109f883993b163829d22fc906b46046469515ce2ff0a8398bade629beb1d7f9de2ab4e383f12d39511f1f2b5bd84ba710c1acf1ce9a75618c1b7bb1153a0d0856eed788bdf29e478ae10e43a4e00168495001e23202096c79901327ec5a0652eea40febdc53180a452827bbb908b6edfc147cf86938faf333007d3924974a1ae08cba2e66d93147bfe1a11620ad629c054ef1d63836cfc56d2ba2f323a1a946ba65417cbd3a0785c7c99353d6dbd086077a3e7da2a6cf8aa00453b59ab29e462b93996642f1ef4eeada9ca309a7bcb1ecc9538367e58640d8b85a07910bffc6fc9d0bbe015ad84e5cc12a646bed3f4e8973b885d9f134edd8e29a823b6bdf2911f6faf1205380b2e6a2f7b85daa8be5a016ddc77064ee4376f527e6fe1115ea2ee7e4198df45f19a1c17ac8025c36cec1811a87363cff0bd40973b9e16a55c8c16691f1e6ec0d6db6b80159a5b5205d8baf1db865ea38c088030220595b0eecdfc7fd75275bdd439d632263936adcb03592cfddc1af3c760a4e212d52ecf4ab12dc0cfee96a8fc3018d8ec7fc8ca948d7e2802f03fb92d5584a68163fb4af7d98a95b7d64ec268e53dc1d807325ecfdd7fc3d69b1d1a54eba311cc454874d59aa2870949301fe7408562af1f54ee4fcc4998d8fccf8a679147b039ba845432ea67d0afc64e9d71fa0b79aee2383941ffa534c075b92373edb42181aa910884d6a3e88f4a65fa55f4cc26630c7e6f8369e119a184cb794c20c0b209e2854f3b30b8675d1ae0093613accc59bb933723efd254bf20403c2913b1ba4b330de59d1504828a7fc47861fb7f877c310225b26846dba543adec564b21905943515f732678332b6f37c236292b8cc08d5baa15481f4952c66d09469f1838de1146a64badbe97652cfeee98d9529797c059d93056cbfcddb985fcb1bde7c3fa3020a94ff36af6a3d22a2431db6668d0df7401cf9cd998c8d806d59a01e67030ada7a77daa2e6e81abccadceb77e1ecd5cc0a75496d2721dacc8df43174858f4e884069c5887fc8f469fe3f655bb69123480ae1487d9854423234af444a43aabd90cdca4e853bcf09416317ff086e95eff5799790c7a9bc2a9a76ea46649f7700e2652c24ca3778dd0a3b067f9ca8ae2a46e506df7d5f09ddb735416c1a94d456a6b8f96fdc08e34c4cdd511f53667f10a1702de34408ce019830345e01517ab22ff04c6c1c7f5fdba7bb91ac07a9d1633ec1fa9849454ba31ae2bf9a57b99fca1aeba5d03b660d2320c6e9362a6b4c903d4b39253bf571ad8fcffabe9609e35be65a65556bfdb1b4c7a6cd82d4e0d5e559236820af5467d0285a62cb20b987e768062dfcc0ca0fb4e85db1f70341ca9775b62aac6d71c4aacaf841e639980f3ec1c1b587257a250b445b50f5bf034d8cda328840a709aeccf0fbd397b0c3cdd0d8f88779f2d815b82f59c3022167c31ee37ccaa14bc3a581dae6b2d2302432ea7642d342b8383e4f2b98eaf29c8e906d4ec762f0be57c644d5b1b51afaa04456708913ac5d875b6dc78e54e223b583f7da3bd8f4c2280f3fde841b2c616b80292129bd9821ccfc75613e8f8020678141982827ea7db797ab933c7d9db72748fab83275061ebf16faa3ae44f9661c5558fe8c29a2f687581226e2582451ce1e7c6f961c896e649d6df415efb1b60dcdf47d4281eac22652eb938d0b7f9bda740bfa5156cfa4e10a5b4c4bbcf583ecc15da10a5aaef056f675847dc7a27b9122de02d9710596e3c39499b386d70fb31514dc55c62247f355be6a10772f72ffa64f976f32bfef1146d06e33188afe3ed1c511f5f155137f66952689f9e16925729e985a576c8834de614cb7d22ab31df9fff5eb8c4169da130add1fca5f782cdc19adb78ceb70874c3042151710d18cc38c6151d29045b2ca8ea176d39e25ce7313c4a4895e30923151a2f683239bf75a76a3b9b98541ddf696eb4b84f320986864a7c44cf122f694a2e799bb1a4666528edfbe11f365279ccd2fe41b5f8e3a72fc11f8fb05aad9d4a5ef7802ab8bd1dfbfec9c7a61923d66369d2873f00231c0fce4caaf9d692202faa7243912296d3db3cdf5e99f15f084253d0ce513ae23b7dc4846db9615fd7a173c6eb4f10ec72160293bffadfb0790526393711ce0f30efc6f41aa321ff8a81d6437934c0f48e400", 0x1000}, 0x1006) setgroups(0x3d2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) sendfile(r1, r0, 0x0, 0x5) 03:35:19 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x300000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfffffffe, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004740000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:19 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2841.649715][T30604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:19 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1ffffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f0000000028080008000300047a0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:19 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x2000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x500000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 2: clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000040)="3084d3ebc57a53ff030000a0b4a234709b") 03:35:19 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x3000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:19 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x100000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2841.938541][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004f00000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x600000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004fc0000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x700000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x200000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x5000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1000000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 2: syz_open_dev$amidi(0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) write$binfmt_script(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x403) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) 03:35:20 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x300000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000500280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4800000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:20 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2842.945967][T30742] tls_set_device_offload_rx: netdev lo with no TLS offload 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000600280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:20 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0) tkill(0x0, 0x1000000000015) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='\x00', 0x1, 0x1) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 03:35:21 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000700280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:21 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x500000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000f00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:21 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x10000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="9bea77e53e5f28") ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) getgroups(0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getresuid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) openat(r1, 0x0, 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:21 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6800000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004002000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:21 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x600000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x48000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2843.808402][T30838] __nla_parse: 10 callbacks suppressed [ 2843.808414][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:21 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x700000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:21 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setgroups(0x0, 0x0) sendfile(r1, r0, 0x0, 0x5) 03:35:22 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004002800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1000000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x68000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7fffffffffffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2844.404688][T30899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:22 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004003f00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4800000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) 03:35:22 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfeffffff00000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2844.644421][T30924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:22 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x74000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004d44600280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:22 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x0, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:22 executing program 2: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) r0 = getpgid(0xffffffffffffffff) getpgrp(r0) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000aa2000/0x1000)=nil, 0x20aa2000, 0x3) setitimer(0x0, 0x0, &(0x7f0000b1bfe0)) socket(0x0, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) 03:35:22 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xffffffff01000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2844.975838][T30960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x42, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000040)={0x1ff, 0x6, 0x1e, "f291eb70b9419571c21273bf28431ab3d63556e1c9a6861aa2489b052519cb77891fbd06ec1c7a7e6382cc9b4f7e5f0f7d9cc5b675a379f0c3a28f74", 0xd, "918e832f57a3de7074c580c1511ef409aa8a7f31edadfe3b04f7153b07e6b2000028d59172a18de180c01d3b970acc17b9209b000bb6363e5f72a7c3", 0x10}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) r3 = fcntl$getown(r0, 0x9) process_vm_readv(r3, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/117, 0x75}, {0x0}, {0x0}, {0x0, 0xfffffffffffffeaf}, {&(0x7f0000001700)=""/221, 0xfffffffffffffdaf}, {0x0}], 0x8, 0x0, 0xfffffffffffffef8, 0x0) close(r2) fanotify_mark(r1, 0x4, 0x20, 0xffffffffffffffff, 0x0) 03:35:23 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xffffffffffffff7f, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x0, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004004800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6800000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2845.365411][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:23 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4002, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x0, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004004c00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 2: msgget(0x0, 0x54) 03:35:23 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfeffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4003, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfffffffe, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2845.635384][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2845.653253][ C1] net_ratelimit: 20 callbacks suppressed [ 2845.653263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.665000][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:23 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004006000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:23 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4004, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2845.856856][T31069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:23 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1ffffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2845.904793][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.910708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.916735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.922586][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.928547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.934447][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:23 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004006800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2846.053266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2846.059179][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:24 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4005, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2846.181002][T31103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:24 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x100000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4006, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004006c00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:24 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4007, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x200000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:24 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7fffffffffffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2846.531067][T31136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:24 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2846.609910][ T7935] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 2846.636727][T31135] cgroup: fork rejected by pids controller in /syz4 03:35:24 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfeffffff00000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2846.672104][ T7935] CPU: 1 PID: 7935 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2846.680067][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2846.690147][ T7935] Call Trace: [ 2846.693481][ T7935] dump_stack+0x172/0x1f0 [ 2846.697851][ T7935] dump_header+0x10f/0xb6c [ 2846.702311][ T7935] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2846.708208][ T7935] ? ___ratelimit+0x60/0x595 [ 2846.712839][ T7935] ? do_raw_spin_unlock+0x57/0x270 [ 2846.717992][ T7935] oom_kill_process.cold+0x10/0x15 [ 2846.723135][ T7935] out_of_memory+0x79a/0x1280 [ 2846.723156][ T7935] ? lock_downgrade+0x880/0x880 [ 2846.723171][ T7935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2846.723194][ T7935] ? oom_killer_disable+0x280/0x280 [ 2846.723216][ T7935] ? find_held_lock+0x35/0x130 [ 2846.732801][ T7935] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2846.732818][ T7935] ? memcg_event_wake+0x230/0x230 [ 2846.732840][ T7935] ? do_raw_spin_unlock+0x57/0x270 [ 2846.732857][ T7935] ? _raw_spin_unlock+0x2d/0x50 03:35:24 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xffffffff01000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2846.732879][ T7935] try_charge+0x102c/0x15c0 [ 2846.774243][ T7935] ? find_held_lock+0x35/0x130 [ 2846.779061][ T7935] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2846.784654][ T7935] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2846.790256][ T7935] ? find_held_lock+0x35/0x130 [ 2846.795064][ T7935] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2846.800687][ T7935] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2846.806281][ T7935] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2846.811527][ T7935] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2846.817120][ T7935] __memcg_kmem_charge+0x136/0x300 [ 2846.817143][ T7935] __alloc_pages_nodemask+0x437/0x7e0 [ 2846.817158][ T7935] ? find_held_lock+0x35/0x130 [ 2846.817176][ T7935] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 2846.817206][ T7935] ? kasan_check_write+0x14/0x20 [ 2846.827746][ T7935] ? lock_downgrade+0x880/0x880 [ 2846.827779][ T7935] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2846.854492][ T7935] alloc_pages_current+0x107/0x210 [ 2846.859650][ T7935] pte_alloc_one+0x1b/0x1a0 [ 2846.864209][ T7935] __pte_alloc+0x20/0x310 03:35:24 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xffffffffffffff7f, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2846.868592][ T7935] copy_page_range+0x1529/0x1f90 [ 2846.873696][ T7935] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2846.879461][ T7935] ? pmd_alloc+0x180/0x180 [ 2846.883920][ T7935] ? validate_mm_rb+0xa3/0xc0 [ 2846.888745][ T7935] ? __vma_link_rb+0x279/0x370 [ 2846.893557][ T7935] copy_process.part.0+0x568b/0x7980 [ 2846.898921][ T7935] ? __cleanup_sighand+0x60/0x60 [ 2846.903929][ T7935] _do_fork+0x257/0xfd0 [ 2846.908134][ T7935] ? fork_idle+0x1d0/0x1d0 [ 2846.912656][ T7935] ? trace_hardirqs_on_thunk+0x1a/0x1c 03:35:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004007400280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2846.918166][ T7935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2846.923663][ T7935] ? do_syscall_64+0x26/0x610 [ 2846.923692][ T7935] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2846.923707][ T7935] ? do_syscall_64+0x26/0x610 [ 2846.923728][ T7935] __x64_sys_clone+0xbf/0x150 [ 2846.923751][ T7935] do_syscall_64+0x103/0x610 [ 2846.934731][ T7935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2846.934744][ T7935] RIP: 0033:0x4567da [ 2846.934759][ T7935] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2846.934766][ T7935] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2846.934779][ T7935] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004567da [ 2846.934786][ T7935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2846.934794][ T7935] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001cd1940 [ 2846.934801][ T7935] R10: 0000000001cd1c10 R11: 0000000000000246 R12: 0000000000000001 [ 2846.934808][ T7935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 2846.946599][ T7935] memory: usage 307176kB, limit 307200kB, failcnt 2989 03:35:24 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x300000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2847.068007][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:25 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2847.356558][ T7935] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2847.384709][ T7935] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2847.391723][ T7935] Memory cgroup stats for /syz2: cache:1164KB rss:253436KB rss_huge:231424KB shmem:1128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1128KB active_anon:253444KB inactive_file:0KB active_file:0KB unevictable:12KB [ 2847.446258][ T7935] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=31075,uid=0 [ 2847.469656][ T7935] Memory cgroup out of memory: Killed process 31075 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:35816kB, shmem-rss:0kB 03:35:25 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4010, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x500000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4002, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004007a00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4003, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004fe8000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4048, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2847.799419][T31400] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2847.912139][T31400] CPU: 0 PID: 31400 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2847.920224][T31400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2847.930323][T31400] Call Trace: [ 2847.933664][T31400] dump_stack+0x172/0x1f0 [ 2847.938072][T31400] dump_header+0x10f/0xb6c [ 2847.942540][T31400] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2847.948393][T31400] ? ___ratelimit+0x60/0x595 [ 2847.953042][T31400] ? do_raw_spin_unlock+0x57/0x270 [ 2847.958213][T31400] oom_kill_process.cold+0x10/0x15 [ 2847.963394][T31400] out_of_memory+0x79a/0x1280 [ 2847.968135][T31400] ? lock_downgrade+0x880/0x880 [ 2847.973032][T31400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2847.979324][T31400] ? oom_killer_disable+0x280/0x280 [ 2847.984565][T31400] ? find_held_lock+0x35/0x130 [ 2847.989390][T31400] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2847.995004][T31400] ? memcg_event_wake+0x230/0x230 [ 2848.000100][T31400] ? do_raw_spin_unlock+0x57/0x270 [ 2848.005259][T31400] ? _raw_spin_unlock+0x2d/0x50 [ 2848.010156][T31400] try_charge+0x102c/0x15c0 [ 2848.014712][T31400] ? find_held_lock+0x35/0x130 [ 2848.019540][T31400] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2848.025157][T31400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2848.031448][T31400] ? kasan_check_read+0x11/0x20 [ 2848.036343][T31400] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2848.041942][T31400] mem_cgroup_try_charge+0x24d/0x5e0 [ 2848.047290][T31400] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2848.052976][T31400] wp_page_copy+0x408/0x1740 [ 2848.057600][T31400] ? find_held_lock+0x35/0x130 [ 2848.062409][T31400] ? pmd_pfn+0x1d0/0x1d0 [ 2848.066713][T31400] ? lock_downgrade+0x880/0x880 [ 2848.071605][T31400] ? swp_swapcount+0x540/0x540 [ 2848.076418][T31400] ? kasan_check_read+0x11/0x20 [ 2848.081316][T31400] ? do_raw_spin_unlock+0x57/0x270 [ 2848.086549][T31400] do_wp_page+0x5d8/0x16c0 [ 2848.091010][T31400] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2848.096434][T31400] __handle_mm_fault+0x22e8/0x3ec0 [ 2848.101626][T31400] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2848.107236][T31400] ? find_held_lock+0x35/0x130 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004008100280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004fec000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:25 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x600000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2848.112042][T31400] ? handle_mm_fault+0x322/0xb30 [ 2848.117032][T31400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2848.123312][T31400] ? kasan_check_read+0x11/0x20 [ 2848.128206][T31400] handle_mm_fault+0x43f/0xb30 [ 2848.133016][T31400] __do_page_fault+0x5ef/0xda0 [ 2848.137829][T31400] do_page_fault+0x71/0x581 [ 2848.142368][T31400] ? page_fault+0x8/0x30 [ 2848.146657][T31400] page_fault+0x1e/0x30 [ 2848.150856][T31400] RIP: 0033:0x45685b [ 2848.154777][T31400] Code: 25 20 06 00 00 b8 80 2d 41 00 48 89 15 6e ff 5f 00 48 85 c0 74 08 4c 89 cf e8 31 c5 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 2a b7 2b 00 00 00 00 00 48 c7 05 0f b7 2b 00 00 00 00 00 [ 2848.174411][T31400] RSP: 002b:0000000000a4fd30 EFLAGS: 00010206 [ 2848.180509][T31400] RAX: 0000000000000000 RBX: 0000000000a4fd30 RCX: 0000000000412d93 [ 2848.188506][T31400] RDX: 000005f6e60efa2b RSI: 0000000000000018 RDI: 0000000001cd1c20 [ 2848.196535][T31400] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001cd1940 [ 2848.204533][T31400] R10: 0000000001cd1c10 R11: 0000000000000202 R12: 0000000000000001 [ 2848.212535][T31400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 2848.238940][T31400] memory: usage 307200kB, limit 307200kB, failcnt 3007 [ 2848.271165][T31400] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2848.295896][T31400] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2848.316327][T31400] Memory cgroup stats for /syz2: cache:1164KB rss:253352KB rss_huge:231424KB shmem:1128KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1128KB active_anon:253460KB inactive_file:0KB active_file:0KB unevictable:12KB [ 2848.347534][T31400] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14772,uid=0 03:35:26 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x700000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000446d400280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4004, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x404c, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2848.364152][T31400] Memory cgroup out of memory: Killed process 14772 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB [ 2848.380593][ T1043] oom_reaper: reaped process 14772 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 03:35:26 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4005, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400f000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x1000000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x7, 0x1, 0x7, 0x81, 0x10001, 0x4, 0x80000001, 0x51ac6f3c, 0x800, 0x67, 0xe895}, 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x10000000000000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000002c0)=0xb10b) select(0x40, &(0x7f0000000140)={0x2, 0x119, 0x6, 0x7ff, 0x7fffffff, 0x5, 0x81, 0xe7f}, &(0x7f00000001c0)={0x7, 0x0, 0x6, 0x9, 0x6, 0x479, 0x8001, 0xfff}, &(0x7f0000000200)={0x2, 0x211, 0x1, 0x0, 0xa8, 0x6, 0x1, 0x6}, &(0x7f0000000280)={r2, r3/1000+10000}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0xbb) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x20) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x15, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 03:35:26 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400fc00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:26 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4800000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2848.906205][T31719] __nla_parse: 6 callbacks suppressed [ 2848.906216][T31719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:26 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4068, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x4c00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:26 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4006, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x406c, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000480fe00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2849.206035][T31748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:27 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4007, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1e) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x7, 0x1, 0x7, 0x81, 0x10001, 0x4, 0x80000001, 0x51ac6f3c, 0x800, 0x67, 0xe895}, 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x10000000000000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000002c0)=0xb10b) select(0x40, &(0x7f0000000140)={0x2, 0x119, 0x6, 0x7ff, 0x7fffffff, 0x5, 0x81, 0xe7f}, &(0x7f00000001c0)={0x7, 0x0, 0x6, 0x9, 0x6, 0x479, 0x8001, 0xfff}, &(0x7f0000000200)={0x2, 0x211, 0x1, 0x0, 0xa8, 0x6, 0x1, 0x6}, &(0x7f0000000280)={r2, r3/1000+10000}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0xbb) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x20) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x15, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004c0fe00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6800000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d15") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4074, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4010, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2849.496961][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:27 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4048, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400ff00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d15") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x6c00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2849.781764][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:27 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x407a, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x404c, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000000670000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:27 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4068, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:27 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7400000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d15") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000feb000/0x1000)=nil, 0x1000, 0x1000001, 0x80010, r0, 0x51) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x1000009, 0x40010, r0, 0x0) r1 = socket(0x4, 0x1, 0xe39) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2b, "054beb1cc410861b2f1327c81a69fb8accc4f25292e79d11698987e9c848c01a895ff3623da505a6a4a93a"}, &(0x7f0000000040)=0x33) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xee, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", 0x0, 0x0, 0x0, 0x0, 0x0}) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2850.269118][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:28 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7a00000000000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x406c, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x7fffffffffffffff, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2850.485790][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:28 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xfeffffff00000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0xa00, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000400280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 03:35:28 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xffffffff01000000, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4074, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2850.748520][T32318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:28 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0xffffffffffffff7f, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000500280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:28 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200200, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:28 executing program 2: r0 = socket(0x200040000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000003c0)=0x1, 0x4) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getpeername$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 03:35:28 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4002, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2851.028306][T32438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:28 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x407a, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000600280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:29 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af35") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4003, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'yam0\x00', @local}) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xfd40}], 0x1}}], 0x1, 0x0, 0x0) [ 2851.331993][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000700280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2851.545965][T32579] cgroup: fork rejected by pids controller in /syz1 [ 2851.597515][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:29 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af35") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r4, r5, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x9, 0x0, 0x2, "b9212c2158303843b5e6b080ad082db316575ff8e3f806079c8656c19225b66d", 0x33424752}) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r8, 0x4b30, 0x7ff) ioctl$NBD_CLEAR_QUE(r8, 0xab05) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x7, "ab6e9d425c8d5cf8aec75d3c0f7a2f72009a294e893db7bf1e11edcacd5ebbf1"}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x200001, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)={0x1, 0x1, [{r1, 0x0, 0x100000000a000, 0x100018000}]}) 03:35:29 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4004, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:29 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af35") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2851.894354][ C1] net_ratelimit: 20 callbacks suppressed [ 2851.894363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2851.907091][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:29 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000100), &(0x7f0000000440)=0x14) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) futex(&(0x7f0000000080), 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) r2 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="faf9f971763c070dee75e1a6feb25ad07d58fe33448d40d5d7edadac9ca7fef85c4939b27cc8abb71f70bd93bbda363843943e3a587c3947dbd32ea380cfbe28b25048c7e0f3adcebb09ad48dc03745df8d6884bfe014e68", 0x58, 0xffffffffffffffff) keyctl$assume_authority(0x10, r2) r3 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x200) flistxattr(r3, 0x0, 0x0) rt_sigreturn() fremovexattr(r1, 0x0) epoll_wait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xd) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000001c0)={0x1, 0xff, 0x1, 0xffffffffffffff07, 0x8}) unshare(0x40000000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x84, 0x0) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000300)=""/208) unshare(0x4000000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000640)=0x281) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@int=0x9, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000500)=0xc) setresuid(r5, r6, r7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffff7ffffffc0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}) 03:35:30 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000004c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x47, r4}) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4005, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000f00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2852.293271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.294031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.299247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.305512][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.318595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.325062][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.331976][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:35:30 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r4, r5, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={&(0x7f0000000100), 0xc, &(0x7f0000000b40)={&(0x7f0000000900)=@report={0x230, 0x20, 0x1, 0x70bd29, 0x25dfdbfd, {0x32, {@in6=@loopback, @in=@multicast1, 0x4e22, 0x4, 0x4e21, 0x7, 0xa, 0x80, 0x0, 0x0, r8, r9}}, [@etimer_thresh={0x8, 0xc, 0xff}, @proto={0x8, 0x19, 0x2b}, @replay_thresh={0x8, 0xb, 0x5}, @ipv6_hthresh={0x8, 0x4, {0x44, 0x31}}, @tmpl={0x1c4, 0x5, [{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@multicast2, 0x34ff, 0x0, 0x0, 0x4624e9e7, 0x65e, 0x2, 0xa79}, {{@in6=@dev={0xfe, 0x80, [], 0x12}, 0x4d2}, 0x2, @in=@remote, 0x34ff, 0x4, 0x2, 0x4, 0xff, 0x1, 0xffffffffffffff7c}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x0, 0x4, 0x0, 0x3, 0x3, 0x10001, 0x6}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d3}, 0xa, @in=@loopback, 0x3504, 0x3, 0x3, 0x40, 0x0, 0x5e66}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d4, 0x32}, 0xa, @in6=@rand_addr="8d79938c10dd5616f082c5e2edb497f6", 0x3502, 0x0, 0x3, 0x1, 0x8, 0x7ff, 0x10001}, {{@in=@local, 0x4d5, 0x3b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x3506, 0x0, 0x0, 0xfffffffffffffff8, 0x101, 0x6940, 0x9}, {{@in=@multicast2, 0x4d6, 0x7c}, 0xa, @in=@broadcast, 0x3504, 0x2, 0x1, 0x400, 0x1, 0x7, 0xff}]}]}, 0x230}}, 0xc040) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r10, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2852.338782][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:30 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4006, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004001000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:30 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004002800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:30 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4005, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$xdp(r4, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, 0x4, r6, 0xe}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000580)="4389adc04a6ac04c636b53227a3a797dd12135ab3853d503d9394a85c8e40dc423fe41f5fb521c9b7757d63d90e1523f3d21b87a9d07fa913cfc5eecb7cdc7c1f8fa470e8a378b76013a8dae19b814d6b9c41edaebfd10aecd58ec58784614c6320ba1b3ca66c91adeb6cc29e6ea37fca7c6d891597eb71c412358a7b8b26b6597c4f1100976ba8e8980b0d81ae8df90504d56f75e465975bbf771d8ec01560c7a9992510a52c496afccc7eb1c1aec3dae42670f16cb2628156b8f3b", 0xbc}, {&(0x7f0000000640)="5d3d6c733c250167fb356592e4f17e0fcd0a828fe96efc78cf97ffdd3e701c96973f84c18967a282d0e973d902d18dc42768b4ad8af58146dd03f3c31ba641a4c345479bed50413ec55657ded47f0271030e1142583870189d2a405669a80e1cc327168a272c3a98e76bbe86beafd2547e60659ba7fc59e4a9ae5f5807077701edc5920c3aa41e8d6de9f6abcba4a10f2afec6739f3506f0692242262e0f15e801a8430fddea2a2deca85a162b12ae7aa140c598b190217cb99da398badd7de1caf04fc30ba86330fe4460a9c5ad439b6136e486ca2c774ca2ce9082ac19b197286e3a85b738bc1974aa2f2e22", 0xed}, {&(0x7f00000004c0)}, {&(0x7f0000000740)="03fdcca5a2a62f4547dde95452f8981042b32e121b772a0ef752945728f812ba60d5a1983a5333ab008eb6ebc4f8963adcf82f11c63c32f439090b6e357f48dabe4b3dcfd6d6ba68bcecf73b14c2f319e162a895eeaad64de52269848cb9b0ed41bb745c32af0b82220f052ac5d76888488dd13823dd927f75940b20463e1243f1decf4bd151d1d5634ee0faed755f3e62c0a821e56d85164df19a5bc7b5e54abf0a570d33a3fb76ea9de1d25d52b4ac87bd09f55354d57665a1698892b922deef4730c02d0625f2dfde0f20729e9f81ba9404acbcf41174e1289c2fbd1feca8ca6113a2f46dfaa24d61937404935b7df31002b7ee4ddd", 0xf7}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="393ac54608d49399972908d6f2e43c1c6c1d87ac96fb41234745cbcdaa9c3beb432f821e111bacd0056b723f0b382b9e290aca8715cd346dd8da74a07fb18e1d914e4221be844113e9441a38bfed97aef1d266fdcf21b12bae29e047f76ac8d40ac09f791f5e863139a114b7b2741c8923", 0x71}], 0x6, 0x0, 0x0, 0x4000000}, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r8, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4007, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x4000000000005, 0x3, 0x100000001, 0x6, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x18) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getgroups(0x3, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000000c0)=0xe8) getgroups(0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) r7 = getpid() prctl$PR_GET_FP_MODE(0x2e) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x80000000, r2, r3, r4, r5, 0x8, 0x6}, 0x6, 0x4, 0x4, 0x7fffffff, r6, r7, 0x80000000}) 03:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004004800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:30 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) membarrier(0x1, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x102, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) getdents(r2, &(0x7f0000000480)=""/48, 0x30) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44050) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4010, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x20, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000280)={{r2, r3+10000000}}, &(0x7f00000002c0)) r4 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@tipc=@id, &(0x7f0000000100)=0x80, 0x80800) r5 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x5, 0x10001) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000003c0)={r4, r5}) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000300)=0x9, &(0x7f0000000340)=0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendto(0xffffffffffffffff, 0x0, 0xfffffffffffffe5e, 0x0, &(0x7f0000351ff0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x467) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 03:35:31 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'irlan0\x00', 0xb000}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004004c00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4048, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="060900000000000000db0900000000000002000000000000004d00000000000000b8000000000000005b0a00000000000007000000000000007f0b000000000000fddc00000851808d38e10dc2000000002a0a00000000000005000000000000000a060b00000000"]) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004006000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x404c, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000003c0)=0x11) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000002c0)={'veth0_to_bond\x00', {0x2, 0x4e24, @loopback}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000300)={@ipv4={[], [], @multicast1}, 0xe, r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x800, 0x402400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0xdbaf, 0x2}, 'port0\x00', 0x40, 0x1, 0x9, 0xfffffffffffffffd, 0x1, 0x1000, 0x1, 0x0, 0x2, 0x4}) r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x80000) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x500, 0x0) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, 0xfffffffffffffffe, 0x40) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004006800280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4068, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004006c00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000280)={@multicast2, @initdev}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="0653b22d3a78fe594548253ce9b9f20d", 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="0500db44c7450000ffffffff2d020000000000e556b35eb80065040400010000000404006f1937867ba5bcbc39e1ffaf87f528c65200e414000000000000000000269476ff2ee4c788dcd08a75717412404981777a47c0b139d29e849e20f7dcf9edd06fcfe0f700f80348201b17bebd3d05378dbd901b046ebfe589cb8fe63dce1205e9b42f4be1609f88bd8a845b67139fd0b13acc5345c957209e0c463aeaf2ac4807449d97894b7b25c70db0c838e06d7459a650c4a6ecdc1b880ef0d0cb3320c06012da6c53a5120bacde541b00a27fc87a5bb7b315fab2c6351266ff9524375058922b4763303edfa5dbceb011748b92fb932a4d66dfe2f605a0df9fc39c0df25157fbc266270f1b8fccc2e52269e2ee6ff8e4e59a4a0f5538b6409fe9868341444edbae9e772bef3d10ef16b893b31f270ff9abb60f724686c436c99997264ee9f80aec3e9d19532767c306ed63d8fc22d36306c1def8aec580669c3801d641be449079470a980e731d1b7340c332c1128732e88142de25d4e949222ff701beddbaac38a6a69efd6cdb36d0f88c5a06b8aebaa02bc17d0a25c6363e93fb77449ede19b469e3250b7ca213ff690410d5b3e0"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd8) ioctl(r2, 0x10001, 0x0) r3 = getpid() perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1, 0x6, 0x4, 0x1, 0x0, 0x100000000, 0x300, 0xa, 0x96ec, 0x5, 0xffffffff00000000, 0x81, 0x1, 0x1, 0x6, 0x200, 0x5, 0x0, 0x400, 0x0, 0x8001, 0xe3, 0x400, 0xccac, 0x1, 0xd9, 0x2, 0xe4, 0x2, 0x9de5, 0x5, 0x14, 0x1, 0x4, 0x200000000000, 0x5cf, 0x0, 0x7aa3, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x100, 0x433, 0xffff, 0x4, 0x1e, 0xfff, 0x5}, r3, 0x10, r1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$amidi(0x0, 0x9c4, 0x70000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f0000000b40)={'\xfe\xff\x02r\xae\xa2\xc7\xf1\x8c\xa3\xe9(\x00\x00\x00\xeb', 0x4}) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000240), 0x4) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000002c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="6d6177676c6500000000000000010000002a00c887c3ef98f91534d2cae600080000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff00000000000000004aa2002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda57848350f6d0f424ca43a1d67f7800f3a59f24753be8dbff3fdfd1340096d81f57929700000000a9e617bb4d67cae0ea44ae5a873eeaa27a786ee2243364372f94c44f323ddb86937d16048550e53aadb638d49313de0d6044231eba04dbfd0dd224e07959e0168121a872ac695f31cb7b4c6193240f6f1fe5ae577dc969f61b63dfd40a8646f302a2650cf8ca97c4f55ad829ddea19710c57f9e299"], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000200)='cgroup.max.depth\x00', 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00004aa000/0x4000)=nil, 0x3) 03:35:31 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") fcntl$getown(r2, 0x9) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r4, r5, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x800400}) perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x4f, 0x6, 0x400, 0x2, 0x0, 0x0, 0x2, 0x4, 0x4cd2, 0xe41, 0x9, 0x7f, 0x9, 0xb0, 0x0, 0x1, 0x9, 0x100, 0x7, 0xfff, 0x2, 0x2e9381dc, 0x1, 0x4819, 0x6, 0x7f, 0x2, 0x3f, 0x80, 0x5d9, 0x6, 0x7fff, 0x10000, 0x7fff, 0x80000000, 0x6, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3f, 0x100000001}, 0x70, 0x800, 0x1000, 0x0, 0x8, 0x8, 0x80}, r1, 0x0, r4, 0xa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x7ff) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) r8 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) futimesat(r8, &(0x7f0000000280)='./file0\x00', &(0x7f0000000580)={{0x0, 0x7530}}) 03:35:31 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2854.006259][ T1018] __nla_parse: 9 callbacks suppressed [ 2854.006273][ T1018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:32 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000100)={0x7ff, 0x7fffffff}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) getresuid(&(0x7f0000000100), &(0x7f0000000300)=0x0, &(0x7f0000000340)) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r5 = getuid() write$P9_RSTATu(r1, &(0x7f00000004c0)={0x78, 0x7d, 0x1, {{0x0, 0x60, 0x1, 0x5, {0x40, 0x2, 0x7}, 0x0, 0x0, 0x3, 0xcff, 0x16, '/proc/capi/capi20ncci\x00', 0xb, 'syzkaller1\x00', 0xb, '/dev/adsp#\x00', 0x1, ','}, 0x3, ',{%', r3, r4, r5}}, 0x78) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x406c, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004007400280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 2: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x7, 0x7f, 0xffffffffffffe775, r0}) 03:35:32 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2854.406076][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:32 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000100)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000440)={0x57, 0x67b, 0x1, {0x4, 0x2}, {0x5e7, 0x3}, @rumble={0x8, 0x5}}) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2854.479481][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:32 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004007a00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r0, r1}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1ab, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x20, 0x20, 0xf29}, 0x20}}, 0x0) 03:35:32 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4074, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000480)=0x3ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r4, r5, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x7ff) openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000100)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2854.821762][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2854.862363][ T1499] QAT: Invalid ioctl 03:35:32 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000300)=0xffffffffffffffa9) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) set_tid_address(&(0x7f0000000100)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, [], [{0x7, 0x3, 0xffffffff, 0x5, 0xffffffffffffffb6, 0x424}, {0x7f, 0xd1e7, 0x40, 0x100000000, 0x4, 0xffffffff}], [[], [], []]}) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2854.892840][ T1450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:35:32 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000080)) ptrace(0x4206, r2) rt_tgsigqueueinfo(r2, r2, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffffffffffc58e}) ptrace(0x4208, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x402000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000200)=0x67e, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r6, r7, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r9, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000440)={0x2, 0x3}, 0xfffffffffffffe38) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400f000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2855.000556][ T1608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:35:32 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:32 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x407a, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x400000000000a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) dup(r1) sendfile(r0, r1, 0x0, 0x8000ffffffff) [ 2855.122657][ T1668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400fc00280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:33 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000300)=0xc) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) r4 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000340)) 03:35:33 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2855.431138][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000003280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:33 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) sendto$unix(r1, &(0x7f0000000440)="c8bdf46e6c3b0b2834b447cf4d36ad9685451fe18e7810e47e302e305e5022a6d766e640bfcf14c62bbeab3434e9ce25da2439c40448d8ad7cf2ed07d17e15a5811ee3c3337ee298674b1a22a6ab5df20f94efc264f882360a09e6e52af40afcfb0474f9c60acdd5e2fc15c0f663261cfd9c6780b4529a4392ac75e5e303dbe1c330d236eaa549", 0x87, 0x20004800, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$FUSE_LSEEK(r1, &(0x7f0000000300)={0x18, 0xfffffffffffffffe, 0x7, {0x7}}, 0x18) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x5, 0x240) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2855.699009][ T1996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:33 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000440)="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") epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000040)={0x50000015}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xb882) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000100)={0x3, 0x1, [0x200, 0x2, 0x6e7, 0x100000001, 0x81a, 0x79, 0x80, 0x7]}) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000005280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:33 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r4, r2, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2855.980801][ T2203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:33 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001440)="0adc1f123c123f3188b070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000001c0)="3790303289fc24ee2cb49d041fe50e265ac91e68ad6a539b58d91574b404715c0a2ef766ea3329ae179fa998f63d7b77ba5bfff367a5087335b7258de2b5735a8bc8113368b012ce6682c89c29b23845486361d7056bbef4e6f34da49879cdedfea4e2e1785f77a4ff146189fd6333d441a423e7d4b989ead71dd63256261c055560424bf8601370570132600262b19d11273b1df267", 0x96}, {&(0x7f0000000080)="7b05dd3fe3abbfd80feaaacca002fabb06311398601c74556267d7f1432f33fcce76dffa1e16507651e1c5786aa4a0561dd226e666a741b3", 0x38}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="9576d721ed5b3d2aa4ec029fe431b123afd16246d9b90a0c9c27d669408259fe8ad2479dbce136e774d084783026287de61d4243151d470cd9bfbce8adc2f15b9cf327bb91ba6f493bc81248fb2e268f021cd5f114b29ee0287210d10850afdf297ba2d1927ecf7fa36b70c4c6a3e87171c24c28e7ed9c0a7652ef9740f6c7f72d71a25ffc2291254c6107985de4cea0fd7ea92dd29ef1cdeba0e5b9ac16365ab675b3d67333", 0xa6}, {&(0x7f0000001340)="17b0b81d73b356b1d82379f5dc013cf6047f6769c29ed09a767e8ab102ff52910e56d2b8442f7330c1836dfa3bc37f6b985876accd18b522b667b395aebeca", 0x3f}, {&(0x7f0000001380)="8f1aceeb57708db3fd388976c836a9a4c36866de40df45ae9caf1705f1220b8de1a2226e94aff0a40e7f5414ffc953e090953372797cd24c1f3f620e8ea3b4cc1b7c5a5e25cbe8fe5576538afd131b1c1c8b06e6d32472e1", 0x58}, {&(0x7f0000001400)="eb7421f2e0d6d6ed5c26", 0xa}, {&(0x7f0000001440)}], 0x8, 0x0, 0x0, 0x50}, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 03:35:33 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000440)={r3, @in={{0x2, 0x4e22, @rand_addr=0x9}}}, 0x84) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000440)={0x92, &(0x7f0000000580)="9d40dbd82c301c382202035b0d4e855f617b633b869076d5a7f9bdfe3554297ea8a287a9a6500f8f6d0be6d15c3aa31ef4e18da281f6715879ef7781ef102cc0fd9ffedf8f3df7e2401f3dacd602532ac7de96ed3e7353d2b906c86a06b4dd8b8a0e6c1963f154dc7f1398a73b5431d42fe5fbefa33d7526439a717a3567e774bdbf5a3067aec97fc0b5d6ddc687b9ce0c3b"}) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:33 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000006280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:34 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r2, r3, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x6) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x7fff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x1c2fd) 03:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000007280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:34 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000100)={0x9, 'syz1\x00'}) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400000f280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:34 executing program 3: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000700)={@mcast2, r1}, 0x14) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r4, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r6 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r5, r6, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r8, 0x4b30, 0x7ff) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000740)={0x40, 0xf, 0x3, "4bb184418cc4bdebfd2214c995ade19d2474dc4811bf7a2869413c70e5ed046e"}) statx(r5, &(0x7f0000000100)='./file0\x00', 0x6000, 0x2, &(0x7f0000000440)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) sendmmsg$alg(r3, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="e3ac11f331dd", 0x6}, {&(0x7f0000000440)="cf3335f07b78a4218d23373811edd8ca25f299b2e20e850e6c32a24712cb5b1b557772fd970de40ed0df4ac542fb4a47e36a610e0d312a80", 0x38}], 0x2, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x40000}], 0x1, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000100)={0x6, &(0x7f0000000440)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}]}) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r4, r5, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000020280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x7fff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x1c2fd) 03:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000028280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:34 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) r7 = msgget$private(0x0, 0x1) msgrcv(r7, &(0x7f0000000440)={0x0, ""/126}, 0x86, 0x2, 0x0) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1ff, 0x200000) 03:35:35 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000100)={0x7ff}, 0x1) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400003f280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:35 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_netdev_private(r3, 0x89f6, &(0x7f0000000580)="fd7c916e8ef80f3e8191fba7788a2083b3fac4444072f491ddfa48628642a77ddd901464eb71a4f3ce207b6fa337ab909fc08eb5b570f613507c41e79a08f66043da4c27aec3a73cba522305c441c2d0b98d5402fbfb4bb7c988a203e2e6374681a93413de8216414de56b60fd57998226b9a7b685574adfaa5b5420e8c9ce71015d2a6b80eeaa2f6c0c87d96d3b1360caa48966a3496079adb835bfa2b92ddc08179d3ed0d74e68fc6045f0baa6a72ff1023f595d049b31c72a6dd124bedafaee643c3af074f2460db2dae0faf89b38289b162d642e1095a43e188531ed9ea68953641950406758cb0c537b80bc03851ab9f7b7603ebc6d248f28f1bd0e5f9007a88a346d625077e1361e2bf0cd440cb00c0bff7975ca6b7825afef88052ca17a25533d34b8f4e4a209bb4601852136bad4725483291d7bf5214b434e3a24e904f29247bc7ddbfdc72e07ccf606225a5297b7cb3a466ae390eb2753eac031650e2fb3979c6c76801fb1fd5fc33c179ef54b28f5c8b55fdcc807b3779b0c4354e9317e941effd48b78f1525b0f1fac550f8454a669bd6a6c3d20a2897fc3efc5f0153d1c6190ca61f1c0f049051609823d516494f6d4b0badacd95ff4da1b90dd2fbe9d4004753e11f6a117a51faf6b5711c3fa57f8334ac16fccef99bc65ec3e882be9f8e0aec7bec097ab1e2894611b6be853d5a403dc2fe11e5ab47d288613603684d5a3408807660dbd975ff9a234ef2a6ad4937f7fd587f5a930739de0487d9754d3bea5ab770e7c61a5fe8afd4ce8cb83d992f3d59a57f489c705a70bef54f31adb4e3ff27448564f66657b1569e91663699fd0ae99e4a7d4e665c671fd7e40645c44984eb748c929fdd0b44e560d273f40a90fe547b681483a26abaf42f09af14666da92efd447757ae469de31477e6330514122508bad9ec640680ef305cab026911f924bf602667cb4193a85345173918ad4793ea93c4d32f3c5d8a2b716443170c15fd9f462e9356e623dfc67ab16e2c4b27fd3d738afa43206bf7139b88c0932ab2a1b99dd53b34ae26296771e861e8ef849a3321c91c6a10654e2954fc5515a9a939234402a051ef017a63765dc552f665cfabe331009750f988888b2d97213c7d05b0335f548ca37107a09e07da7b4b80fff6886cf808fd8f382832a5097d01870865f9fac95974df8a77ec0692eb715024b76c772205c6e8b8ff28c6d499e975ec1fbc756d1bab68172be2e380ba8eb5fd11247b1ba40aadbe0ab310a7acff74a05d36ae1609c4a174c8a15e333d84e89f4f4987c592d330a2d6a6bfa2b1e112da541086cff28660d286e728e648d3f48a10e6b41028fca7a1d807ddb3a58f2d6745e7f3880f46db52d554672df877e9de0553bdca9f9a3a0c11450fd06e00d79fef8fce9919ef757b7c6742f17dfd96efc25b2754ff2474173ea58e4af1b250755b246acf337392a29f8de9f22ac5648407b9434f410bfcd4754d4a5d0da5d8843abd5e82fa8e056aa5c830ad1a56e894017e2cfb1bea66598a5e3d96e468c76c0970394e814e0f45f7ad70004abac4851a4aa4429be2d5158edf3961c6f4f1c7849345ed219fe936aba6d50f0b90e6cd6b79507da7f9b0eff1a12f1e6a154626e4d73fdb0454de7b4ac3f0aad7e9581920a6d31f70798296c4fa4f13173dac2c25b43fee1c432ace343ddd58a0bccab024d15eed2c59a537b68c2dec30cdbf6917a385911c6ce207744bfbe844a4e3a9d0596b95f3c93b0b5c8569ce9aa2a5e7237caa6c103d7d4f84f77914e58126df5ac87b32a09adfa5d8286aac0277225550e8c3f29692cdc75c55dfa7f839463b0920f89a0c90febe1404d000ff40c304ca354c9a3664eac34e27bc76a934a315f7c4b8a2a3668519062d88c4d7ccf7a232d7ba61a94113cecb72c025856902fb8ed28ca45fe69c389af40385a9f4f4e7c91debf6319d5c398beba58b582cc49dabb693dc3d1a2872c1d93df74b89969701cbcedc201800508df97bab6aea143cae51cf47d9938c07aef0cc6dab5ef2be121a6f2d934f03f982cb8c3a84686163989cd645b405fb2af7fa11764215a8ea6d993f79989471d11a990ce77ae5cad08e93be2a9bc92becbb84f3a7e7b94441df7e707459943e03acbab9a6528341f530ab413c3f41df54f5439a2af6f75b7af0e0986eb8006c668d000eb380f701323c04f8ebef3d34a5ce3a09853725a18b23fda807e1e8e3d4127b31c977e81fc85788ffec347171fb085df72a7780d492a4c65ed29218e20280481e05c26ebcb9fe592bb9861e5851735abdb1d7d6df5e20f9a1c017f1883cc683e72d4b0d78fba10d6d2c012e71d286d649b23130b1fe5b09398e6a4384cd3af286574d341d98162ec6e9c687728aafcb8f601432571dace8a05095e8d984b51ff016286fe40d09b75d0b0f696592d8bc2d532f752fe6f7de89f7e49e3ba7d0cd091d0729e31464bd17e673498463724ab877fdc10bafa8cd6ec27e7a4476afab2eca9140d364e8b39ee0eddc2b02fefbcdd0e3feaf66a9709a5e806a0f1391d39c3be7c1a8804c4ecec4c85d3823f2baec3e803f6019d6c2961558d145a9f1ca224e291acf71e58e939cd11cf340597b4acc6b1dd0424402f41029b2c0f5f38272dcab9d602e5b20f8fe6c71beba2aebf4217de4c40ca1c14bc14c53e5b5a75302b5eb1e11e97e1893ad5116af9c409684e66d0e114331eda7a390ecf1bff9424cf2e7d445a9c313abdcf5f05c8afbc3b65e2445d74f6fd18f702bda553efd6ff014ca172ee6ef398cff3632217378b8a59a0b1c57ae2af4ad8fa86ba2f17e7e48867ff313da9c8bbbc6110d10fd800ec555a69ec0e5df329a38fe7499125ceef5226211fdba00771448560b81f3667c19da2983fee67f57e03130f1d5adce8b365139456248027fb54e637c94060da349de508fab161a8bc767593a2e53bdffa167244b10eeac94ec31de83be002ee5710a076e5caef05503ed310f209ffa13229d4fac1200ed863f34510906b6398dad68d40718500ff48eb1ffd8d74bba389e74187e1600109aac3bff81f9b4efb1d839db8ca935e62720749535eac2187160fbcf8dd668cb31d9dc1401e7fa1df16dc473bb66ea6f21e53ef5d7f2ddd319c978cce0fed5a89b8b168e842cc998bb20c8eba9754edf91f9a4f1bf6ee7f75fe6f0a78318f8bb9720afbd1a3d28c8c73179b630f16ee4d51a260996db4bef0666128ac436d613a51c60bf70fe48ddec4e0a54ba2faaa3a1c8aa312f8f3612579342490e90089ddd63ef9b9683ae6afbde66c7682b5a278c779aed9f2364d317c0510734a30fd331723bb0de9ea19d75779f2830fbb9bc1b576bac23f96eac5cb0024adbd344628e36f0c95c121e9bc8e3069cff13bb7087e4bf9f611c9889d6c894297c87659eddb9570f38fcca05a7771eb47998edc2a7af040c452beb7e11ff0154aafe8fc379c3f1918875443e633ecb189fcf1b6bc042038ed5f7db7c8fce1862d3eac20a682051afb3921dc8c83a465c91ed9f96f45dd76a7439d31c9b710be6fc93f367733f4bbba15caf7e7b4554ffb8c64ae5633bb19bafda376b14ba184dfcdab48190b20f176621d60fa6658a586113a6a7a315483b15aefcb7ce00192182a01fe32fa0ffdc52a308efb7f19e5fa0bcbbfc4b6c0c5b3d88022cb2815d59db43c7e5e25388a8fe9da373996d66efc81983426e6971af49f0fa8f9397d9b026eafc30d063ad762e1660eac637d98649c1529c42c066e29e09e1a9d2191c4bff47153b26d6483b33682a3bd3b51923d592a1f0664412913e8cb9caa70f9c6ac5674481afd98d88cb4559d0f01c076fb059eee4c667f401b1286f5761008d782b9fbda1aaf4940c958b316929f8a2207b24f9b69919202a87ff4d56663d53c57391fe39432f5c5963292885f5d54d989032791a88e8d580a5637421de7715e1d521917bbf3f50b383a9f728d8d92ed4b4e649d667cea7e70943f4f0d81e326b5636bc4132b9a4cc67df47b8d896ebc296d180b0ddd492be4b3a9a67d5a89821789978531dfa2926986650ca5d2b388e4b49279dff085c1f834a8daad9acf72a269e2c285fcf29e2ae92cee7de9dec93dfd08d9df87b94dd066529b77d0980e717515f30ff325bfd664c73dc8738e18576596fa2b2c0c4e85f983c42fb24bc4ec7e466d363a1f4f130df292e414638cc657e235fd91a85b18139f2b680f366e343f5bc7d1bb7305014d0c4373b679d8c8be61044866a93f5282d140732be221ea7e0c2d66ff02859265205f4cd85f1cc5d6053a5e9483ca2844fa83a84f629f8961ff5f3de79795df5e9a2d85faa90b4b0f18c51bec2cd25aa5e2687f6f13b02be76f1b1f7b87e5b79270bbc2b1f7bc358f6cdb19f0a2318053bfce329e47de8558a39f3f0288f331afab915ad2aa751e8c27edb8fce95d800d0d165857678346800cbb74f0f1fc3405a59330f6404593ecd46cf3ea70a3e91aa499ce7f7bf6f34ffb4bd3ef857e7800e54e1a91b6821a4d34eab9c0b8d99856878255ee592bcc83e3f51f53b68c285020bd5af621484674a26d43cd4513ee22a6fbdc61bf75eb661aff4c28691b4c8e124b9ed5a79b0a49691ff3e8299ce5af57a965157b39cd4a121361bcea6c75d5369e7bd4be1f7b149d1291a828266e5df1cac0469efb734a2e2027e77d008e8de1f98568c66da528504bc5ad27b2b86654003d9ec22bb546e92364652ce63b0dcc750809811b626b72d8acb17e2055ac67d71f97ee5ef54573011e1fc6487422ec0f1b8777c0d1bcfa5c1dbc5a835968f1b988dc20b7d727a3e3e1adf811882f8f8aa3eb34a2d1bb2d73285f7f62906344a325241cf5a90fb0f7989e273711dd8622233d3ba5541b4af9192d0b6a3221b752a89423de0ba1c266ba5c53226ffd532d6519774dd06f0dc3e5a525aec0c12ace581a78d3b23947385a365b6ffd0b0114e5bb2aed72e44fea86f57649719f199a1c26d42910204c691319a7f001bced202cf33dd2af54343d4f6dfb6055f9995640c799aa9dc181d34cb0f73b2460e0d5ef33c3654355701bb1d03285241da94a08cbd6fa9d00e031f748a238ffb4a9c7b6b7678ada265b318a1da48f791c5e4f90ea3b7b997e98d9c7bf47008575fbb4bf7eb4a4250a8fc195a1e9ee9d6ea6945e7e26f132d10c2833b54239e1e39677a421d77bc6effccfc00e8042c77a980ef9c7ab608a40d63ceeb0352705011f17551cd0428505dacae83adfb79ad19bb8c06b0bc10df7aa79fba2203d19ddb312354309325a339f8b53a3b9e33f6d13ab74dcaccdcded1a72c4e7a159a466645bb498501cb086964b12daea447aa1a4df9461a22e2d6e2023da0c73ee4a56ed243bd2b8ee66451af629cbe33056894f430e761efa6693594380f5fa23b076b6f45c621fe02f303ec59081c4d55ddb6ccd379eb9aecb6e54cc442aeb8f034659481fa066e143f610d41a10e597d8575e1eed31f124c4ec49bcee747a2a54afaada145f09b69036813a81ffd5b55e7740cbfb4e6a27ee432ab7a902b2686c7f683c0d14ebcc19831cd1d55b67fa9035e3d406765d8cc2a0036134fcf4cb5093ef90188ae30dcc0d1972fe6cd09ad36ce83ebf437bd597f806f8daae8343ea86d0b740483bdd7e0853c836463579a60b974bee560ae06a0e1771295bb54202bee7b796b97f7e78eb5042d2344a31bcf909898fd19df91c617e2ed94a120c2200c3c80cd016f63978674940d566a61001b995c85fb0c49038abc5528cee533da9b6a") openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400d446280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:35 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00000004c0)={0x74, 0x0, [0x379, 0x7, 0x4, 0x7f]}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() write$FUSE_ENTRY(r3, &(0x7f0000000580)={0x90, 0x0, 0x7, {0x6, 0x3, 0xbdec, 0x8001, 0x2, 0x4, {0x1, 0x3, 0x3, 0x9, 0xfffffffffffffffd, 0x968f, 0x400, 0xfa, 0x8, 0x7fffffff, 0x5, r7, r8, 0x3, 0x1ff}}}, 0x90) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x2000, 0x780007fd, &(0x7f0000ffc000/0x2000)=nil) ioctl$KDMKTONE(r3, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0xe6) r2 = epoll_create1(0x0) r3 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x100000000, 0x1, 0x5, 0x14c, 0x0, 0x8001, 0x60200, 0x0, 0x400, 0x5, 0x401, 0x1, 0x5, 0x3, 0x8, 0xc1b, 0x5, 0x5, 0x6, 0x1a81, 0x4, 0x10000, 0x1000, 0x1, 0x10000, 0xff, 0x8, 0x893, 0x5, 0x8000, 0x5, 0x1000, 0x7, 0x1d4, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0xc050, 0x3, 0x652a, 0x0, 0x3, 0xf8c, 0x3}, r4, 0xf, 0xffffffffffffff9c, 0xa) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000200)={0x2}, 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x4}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:35 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000440)=0x8) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r8, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) r9 = getuid() fstat(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r9, r10) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000048280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:35 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000440)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000580)=""/121) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) read$eventfd(r3, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) write(r3, &(0x7f0000000480)="d8214fb4e064528b0f3029bbf7c917b7b63dd815a97bf770429e705a518c0c730e0a3c82f09c0f7fd7025d5feae42465b80f196296929a3cc705ba84a695d4ade44f979c6b50e3dceab4f3ff70d2f939b89369a213343ab1be8641fde8ebe39a2de49cfb2083e10dbc5c8b9c602c159b5abdac56ed14951efc15dc75bb4e3c06595fbbeef2e98b137291138ff51e4528136b0946fabace81cc06", 0x9a) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) fcntl$setpipe(r4, 0x407, 0x3) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) getsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000840)={@mcast1, 0x0}, &(0x7f0000000880)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xf, 0xb, 0xfffffffffffffff8}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x5, &(0x7f0000000580)=""/5, 0x41000, 0x1, [], r6, 0xf}, 0x48) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x7ff) write(r4, &(0x7f0000000440)="ae9d4c013fe05eb91be0997781209cdeb892b0a164f5d200fcea3bd8d6e6eec97eb97d68605b970f7e41f78dd09b5141a879467bf49fdaa9b6e0127b31dd19d7ed97c6dd7aed3807a44068c7c64e6e132357d6610df2197bd73e790d027c9ac9ab48d10b2812b2f2567396eae8a30877d8880175d3c734b6dc5d1d1c056cde77fb99e8cbcaacde18f321a09cf5f284ef3176", 0x92) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x440) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000440)={0x8, 0x0, [], {0x0, @reserved}}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x5, 0x0, [{0x203, 0x0, 0x8ef}, {0x184, 0x0, 0x3}, {0x37e, 0x0, 0x2}, {0xab5, 0x0, 0x8}, {0x40000af2, 0x0, 0x80000001}]}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400004c280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2858.079215][ T3284] syz-executor.2 invoked oom-killer: gfp_mask=0x500cc2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 2858.113858][ T3284] CPU: 1 PID: 3284 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 03:35:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000060280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2858.121924][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.132484][ T3284] Call Trace: [ 2858.135993][ T3284] dump_stack+0x172/0x1f0 [ 2858.141032][ T3284] dump_header+0x10f/0xb6c [ 2858.145596][ T3284] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2858.151443][ T3284] ? ___ratelimit+0x60/0x595 [ 2858.156569][ T3284] ? do_raw_spin_unlock+0x57/0x270 [ 2858.161773][ T3284] oom_kill_process.cold+0x10/0x15 [ 2858.167171][ T3284] out_of_memory+0x79a/0x1280 [ 2858.167192][ T3284] ? lock_downgrade+0x880/0x880 [ 2858.167216][ T3284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2858.167234][ T3284] ? oom_killer_disable+0x280/0x280 [ 2858.167246][ T3284] ? find_held_lock+0x35/0x130 [ 2858.167272][ T3284] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2858.167285][ T3284] ? memcg_event_wake+0x230/0x230 [ 2858.167306][ T3284] ? do_raw_spin_unlock+0x57/0x270 [ 2858.167323][ T3284] ? _raw_spin_unlock+0x2d/0x50 [ 2858.167347][ T3284] try_charge+0x102c/0x15c0 [ 2858.220474][ T3284] ? find_held_lock+0x35/0x130 [ 2858.225374][ T3284] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2858.231774][ T3284] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2858.237497][ T3284] ? find_held_lock+0x35/0x130 [ 2858.242391][ T3284] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2858.248078][ T3284] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2858.253858][ T3284] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2858.259307][ T3284] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2858.265321][ T3284] __memcg_kmem_charge+0x136/0x300 [ 2858.270484][ T3284] __alloc_pages_nodemask+0x437/0x7e0 03:35:36 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f0000000580)="982bd6b33b22a1f534d1759057b5a63cafebf485ef58e7a609ec7d8104616cab070daf3596d3b64bb10ca21f21c90084eebb8b07d9119726857e1e905ee2420112738550bb5106eef9b21454123dff2809bd9e1379383c78f303fe3a6317437433155b5d9b986009a74bdfc6d7bc088c80d54ccccead5d6e3de11cb9145e7642236886b05e12d2") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000100)={r2, r4, 0xfffefffffffffffa}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:36 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x380, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'tunl0\x00', 0x1000}) prctl$PR_GET_THP_DISABLE(0x2a) [ 2858.276761][ T3284] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 2858.283092][ T3284] ? copyin+0xb5/0x100 [ 2858.287448][ T3284] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2858.296267][ T3284] alloc_pages_current+0x107/0x210 [ 2858.302131][ T3284] pipe_write+0x659/0xf30 [ 2858.307522][ T3284] new_sync_write+0x4c7/0x760 [ 2858.312382][ T3284] ? default_llseek+0x2e0/0x2e0 [ 2858.317437][ T3284] ? common_file_perm+0x238/0x720 [ 2858.317456][ T3284] ? __fget+0x381/0x550 [ 2858.317479][ T3284] ? apparmor_file_permission+0x25/0x30 [ 2858.327056][ T3284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2858.327079][ T3284] ? security_file_permission+0x94/0x380 [ 2858.327102][ T3284] __vfs_write+0xe4/0x110 [ 2858.327124][ T3284] vfs_write+0x20c/0x580 [ 2858.354722][ T3284] ksys_write+0xea/0x1f0 [ 2858.354744][ T3284] ? __ia32_sys_read+0xb0/0xb0 [ 2858.354763][ T3284] ? do_syscall_64+0x26/0x610 [ 2858.354781][ T3284] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2858.354796][ T3284] ? do_syscall_64+0x26/0x610 [ 2858.354818][ T3284] __x64_sys_write+0x73/0xb0 [ 2858.354837][ T3284] do_syscall_64+0x103/0x610 [ 2858.354858][ T3284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2858.375072][ T3284] RIP: 0033:0x458209 [ 2858.375090][ T3284] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2858.375098][ T3284] RSP: 002b:00007f1368b65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2858.375113][ T3284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 2858.375123][ T3284] RDX: 000000010000014c RSI: 0000000020000340 RDI: 0000000000000005 [ 2858.375132][ T3284] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2858.375141][ T3284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1368b666d4 [ 2858.375150][ T3284] R13: 00000000004c3f3a R14: 00000000004dc898 R15: 00000000ffffffff [ 2858.375397][ C1] net_ratelimit: 17 callbacks suppressed [ 2858.375405][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.440574][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.514417][ T3284] memory: usage 307200kB, limit 307200kB, failcnt 3080 [ 2858.521379][ T3284] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2858.533266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.533306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.539369][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.545353][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.551209][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.562801][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.568840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.574858][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.670902][ T3284] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2858.698195][ T3284] Memory cgroup stats for /syz2 [ 2858.715570][ T3284] : cache:1024KB rss:253236KB rss_huge:229376KB shmem:1036KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1128KB active_anon:253368KB inactive_file:0KB active_file:0KB unevictable:12KB [ 2858.765347][ T3284] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14934,uid=0 [ 2858.786836][ T3284] Memory cgroup out of memory: Killed process 14934 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB [ 2858.819113][ T3234] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2858.836788][ T3234] CPU: 1 PID: 3234 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2858.844764][ T3234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.854856][ T3234] Call Trace: [ 2858.858272][ T3234] dump_stack+0x172/0x1f0 [ 2858.862643][ T3234] dump_header+0x10f/0xb6c [ 2858.867176][ T3234] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2858.873013][ T3234] ? ___ratelimit+0x60/0x595 [ 2858.877622][ T3234] ? do_raw_spin_unlock+0x57/0x270 [ 2858.882761][ T3234] oom_kill_process.cold+0x10/0x15 [ 2858.887892][ T3234] out_of_memory+0x79a/0x1280 [ 2858.892595][ T3234] ? oom_killer_disable+0x280/0x280 [ 2858.897812][ T3234] ? find_held_lock+0x35/0x130 [ 2858.902610][ T3234] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2858.908307][ T3234] ? memcg_event_wake+0x230/0x230 [ 2858.913365][ T3234] ? do_raw_spin_unlock+0x57/0x270 [ 2858.918497][ T3234] ? _raw_spin_unlock+0x2d/0x50 [ 2858.923369][ T3234] try_charge+0xa87/0x15c0 [ 2858.927806][ T3234] ? find_held_lock+0x35/0x130 [ 2858.932605][ T3234] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2858.938176][ T3234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2858.944449][ T3234] ? kasan_check_read+0x11/0x20 [ 2858.949323][ T3234] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2858.954892][ T3234] mem_cgroup_try_charge+0x24d/0x5e0 [ 2858.960209][ T3234] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2858.965874][ T3234] __handle_mm_fault+0x1e1f/0x3ec0 [ 2858.971028][ T3234] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2858.976604][ T3234] ? find_held_lock+0x35/0x130 [ 2858.981399][ T3234] ? handle_mm_fault+0x322/0xb30 [ 2858.986372][ T3234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2858.992644][ T3234] ? kasan_check_read+0x11/0x20 [ 2858.997556][ T3234] handle_mm_fault+0x43f/0xb30 [ 2859.002357][ T3234] __do_page_fault+0x5ef/0xda0 [ 2859.007161][ T3234] do_page_fault+0x71/0x581 [ 2859.013393][ T3234] ? page_fault+0x8/0x30 [ 2859.017660][ T3234] page_fault+0x1e/0x30 [ 2859.021864][ T3234] RIP: 0033:0x40fc1f [ 2859.025782][ T3234] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2859.045416][ T3234] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 2859.051514][ T3234] RAX: 00007f1368ae3000 RBX: 0000000000020000 RCX: 000000000045825a [ 2859.059510][ T3234] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2859.067531][ T3234] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 2859.075524][ T3234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 2859.083664][ T3234] R13: 00007f1368b03700 R14: 0000000000000003 R15: 000000000073c0ec [ 2859.103606][ T3234] memory: usage 307200kB, limit 307200kB, failcnt 3148 [ 2859.111467][ T3234] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.119548][ T3234] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.126868][ T3234] Memory cgroup stats for /syz2: cache:1024KB rss:253548KB rss_huge:229376KB shmem:1036KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1128KB active_anon:253544KB inactive_file:0KB active_file:0KB unevictable:12KB [ 2859.149910][ T3234] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24452,uid=0 [ 2859.165622][ T3234] Memory cgroup out of memory: Killed process 24452 (syz-executor.2) total-vm:72712kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB [ 2859.182654][ T1043] oom_reaper: reaped process 24452 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 2859.252297][ T3811] syz-executor.2 invoked oom-killer: gfp_mask=0x500cc2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 2859.264798][ T3811] CPU: 0 PID: 3811 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 2859.273008][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.283295][ T3811] Call Trace: [ 2859.286622][ T3811] dump_stack+0x172/0x1f0 [ 2859.290981][ T3811] dump_header+0x10f/0xb6c [ 2859.295432][ T3811] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2859.301333][ T3811] ? ___ratelimit+0x60/0x595 [ 2859.305933][ T3811] ? do_raw_spin_unlock+0x57/0x270 [ 2859.311057][ T3811] oom_kill_process.cold+0x10/0x15 [ 2859.316202][ T3811] out_of_memory+0x79a/0x1280 [ 2859.320917][ T3811] ? lock_downgrade+0x880/0x880 [ 2859.325854][ T3811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2859.332114][ T3811] ? oom_killer_disable+0x280/0x280 [ 2859.337466][ T3811] ? find_held_lock+0x35/0x130 [ 2859.342278][ T3811] mem_cgroup_out_of_memory+0x1ca/0x230 [ 2859.347858][ T3811] ? memcg_event_wake+0x230/0x230 [ 2859.352896][ T3811] ? do_raw_spin_unlock+0x57/0x270 [ 2859.358033][ T3811] ? _raw_spin_unlock+0x2d/0x50 [ 2859.362905][ T3811] try_charge+0x102c/0x15c0 [ 2859.367413][ T3811] ? find_held_lock+0x35/0x130 [ 2859.372338][ T3811] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2859.377922][ T3811] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2859.383604][ T3811] ? find_held_lock+0x35/0x130 [ 2859.388404][ T3811] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2859.393992][ T3811] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2859.399563][ T3811] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2859.404796][ T3811] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 2859.410371][ T3811] __memcg_kmem_charge+0x136/0x300 [ 2859.415611][ T3811] __alloc_pages_nodemask+0x437/0x7e0 [ 2859.421167][ T3811] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 2859.426949][ T3811] ? ___might_sleep+0x163/0x280 [ 2859.431809][ T3811] ? copyin+0xb5/0x100 [ 2859.435904][ T3811] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2859.442167][ T3811] alloc_pages_current+0x107/0x210 [ 2859.447357][ T3811] pipe_write+0x659/0xf30 [ 2859.451737][ T3811] new_sync_write+0x4c7/0x760 [ 2859.456439][ T3811] ? default_llseek+0x2e0/0x2e0 [ 2859.461334][ T3811] ? common_file_perm+0x238/0x720 [ 2859.466365][ T3811] ? __fget+0x381/0x550 [ 2859.470532][ T3811] ? apparmor_file_permission+0x25/0x30 [ 2859.476096][ T3811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2859.482368][ T3811] ? security_file_permission+0x94/0x380 [ 2859.488092][ T3811] __vfs_write+0xe4/0x110 [ 2859.492433][ T3811] vfs_write+0x20c/0x580 [ 2859.496731][ T3811] ksys_write+0xea/0x1f0 [ 2859.500998][ T3811] ? __ia32_sys_read+0xb0/0xb0 [ 2859.505778][ T3811] ? do_syscall_64+0x26/0x610 [ 2859.510467][ T3811] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2859.516549][ T3811] ? do_syscall_64+0x26/0x610 [ 2859.521247][ T3811] __x64_sys_write+0x73/0xb0 [ 2859.525853][ T3811] do_syscall_64+0x103/0x610 [ 2859.530465][ T3811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2859.536364][ T3811] RIP: 0033:0x458209 [ 2859.540279][ T3811] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2859.560034][ T3811] RSP: 002b:00007f1368b02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2859.569680][ T3811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 2859.577734][ T3811] RDX: 000000010000014c RSI: 0000000020000340 RDI: 000000000000000c [ 2859.585743][ T3811] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2859.593755][ T3811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1368b036d4 [ 2859.601751][ T3811] R13: 00000000004c3f3a R14: 00000000004dc898 R15: 00000000ffffffff [ 2859.612838][ T3811] memory: usage 307196kB, limit 307200kB, failcnt 3325 [ 2859.621238][ T3811] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.630342][ T3811] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.637334][ T3811] Memory cgroup stats for /syz2: cache:1024KB rss:253536KB rss_huge:227328KB shmem:1036KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:1128KB active_anon:253592KB inactive_file:0KB active_file:0KB unevictable:12KB [ 2859.660854][ T3811] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3234,uid=0 [ 2859.676315][ T3811] Memory cgroup out of memory: Killed process 3402 (syz-executor.2) total-vm:73108kB, anon-rss:6468kB, file-rss:35796kB, shmem-rss:0kB 03:35:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1) io_setup(0x10000, &(0x7f00000000c0)=0x0) io_cancel(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f00000002c0)="8f33d600de16b0a2f12468c65bfca9fccb4f963c5789d65cca8ca4c2889bc4ab1e9825a2d2d640cf23b8c1077155a0ea6aee169d98ae3ac448190dc8841b81c97b5b48570a61aea2941dffe0ef69343cc6f3b17007304392a388f3aed07f58aca7e103d177c9ccb82fb40a9e62fc68cf7793eb8ba6908055cbeae63444dd545f4af80482523670833443c529ab74e9bf08c5af594181924b3761f5803ee64da48fec50db87da87ac20c95328a8", 0xad, 0x5, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000004c0)) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000001c0)={0x8, "f09ff68c77262781473f094357a676e4df38bce07aa55b5d41213f3cebad23a5", 0x4, 0x1030, 0x63a4, 0xff, 0x10, 0x4, 0xad4, 0x7f}) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) writev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="3dffe70647889fd1e5e12bce3c5ae50bc053b14be9a407fad87d0417ab450ac8f289acdd866b94530007394dcca3a754aa5b860a60a4ca0cada7a8e466a5943b54b367fc2d4a20a191a23e353ac6ca6240f1ebc08d9408ab2aed725bd9e59740cb443e01d84ee9c5b81ac3fc8acb95b4a5483594bfc55013f669d730a3c814a10ee188fa0883403bec0fe6d97add877872d464f4c564b2ccbb8c4f93762bbb46fba29b8db9bb25bd628298f3f240d066c99d62e750e61f8db4559d44cf83d3ea541d35", 0xc3}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000500)) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000240)) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000180)) [ 2859.698496][ T1043] oom_reaper: reaped process 3402 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 03:35:37 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:37 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000068280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:37 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fgetxattr(r2, &(0x7f0000000100)=@known='trusted.overlay.upper\x00', &(0x7f0000000440)=""/82, 0x52) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) ioctl$KDSETLED(r3, 0x4b32, 0x1aa) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:37 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x100000000200001, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x1, 0x100000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r4, 0x4b30, 0x7ff) vmsplice(r2, &(0x7f0000000300), 0x0, 0xc) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2859.770372][ T3826] __nla_parse: 13 callbacks suppressed [ 2859.770383][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:35:37 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='J', 0x1}], 0x1}, 0x0) sendto$inet(r6, &(0x7f0000000a00)="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", 0x480, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:37 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:37 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl(r1, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r5, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x8000000fff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) 03:35:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f00000000280800080003000400006c280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 03:35:37 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x5, &(0x7f00000003c0)="4ed512b456e0c1bc680bc97e0471982bd6b33b22a1f535d1759057b5a63cafebf485ef58a9ab1b763d1575f0af3596") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000340)={r3, r4, 0xfffffffffffffffc}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)={0x20000000}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x400}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000140)=""/65, &(0x7f0000000080)=0x41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000822, &(0x7f0000ffa000/0x4000)=nil) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000440)={0x0, "417b883ed6c6db32dec5e5d99232202493a62013ce6ad3eb6b7e09c1ea93b8f0", 0x5, 0x410, 0x80000000, 0x1ff, 0x0, 0x0, 0x10001, 0x3}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDMKTONE(r6, 0x4b30, 0x7ff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0xfff}, 0x2) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x10401, 0x0) [ 2860.081572][ T4038] ================================================================== [ 2860.091030][ T4038] BUG: KASAN: use-after-free in rds_cong_queue_updates+0x209/0x4d0 [ 2860.099341][ T4038] Read of size 4 at addr ffff8880896d8084 by task syz-executor.3/4038 [ 2860.107828][ T4038] [ 2860.110225][ T4038] CPU: 0 PID: 4038 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #34 [ 2860.121716][ T4038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.131919][ T4038] Call Trace: [ 2860.135379][ T4038] dump_stack+0x172/0x1f0 [ 2860.139798][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.144118][ T4048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2860.145575][ T4038] ? rds_cong_queue_updates+0x133/0x4d0 [ 2860.145637][ T4038] print_address_description.cold+0x7c/0x20d [ 2860.166764][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.172378][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.177989][ T4038] ? rds_cong_queue_updates+0x133/0x4d0 [ 2860.183586][ T4038] kasan_report.cold+0x1b/0x40 [ 2860.188423][ T4038] ? __sanitizer_cov_trace_const_cmp2+0x10/0x20 [ 2860.194751][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.200444][ T4038] check_memory_region+0x123/0x190 [ 2860.205609][ T4038] kasan_check_read+0x11/0x20 [ 2860.210335][ T4038] rds_cong_queue_updates+0x209/0x4d0 [ 2860.215794][ T4038] rds_recv_rcvbuf_delta.part.0+0x34f/0x3f0 [ 2860.221784][ T4038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.228088][ T4038] rds_recv_incoming+0x789/0x11f0 [ 2860.233310][ T4038] ? rds_recv_rcvbuf_delta.part.0+0x3f0/0x3f0 [ 2860.239437][ T4038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2860.245765][ T4038] rds_loop_xmit+0xf3/0x2a0 [ 2860.250321][ T4038] ? rds_loop_inc_free+0x20/0x20 [ 2860.255302][ T4038] rds_send_xmit+0x1113/0x2560 [ 2860.260132][ T4038] ? rds_send_ping+0x130/0x130 [ 2860.264946][ T4038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.271238][ T4038] rds_sendmsg+0x3017/0x3550 [ 2860.275893][ T4038] ? rds_send_drop_to+0x1620/0x1620 [ 2860.281154][ T4038] ? aa_sk_perm+0x288/0x880 [ 2860.285752][ T4038] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2860.291356][ T4038] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2860.296866][ T4038] ? rds_send_drop_to+0x1620/0x1620 [ 2860.302119][ T4038] sock_sendmsg+0xdd/0x130 [ 2860.306723][ T4038] ? rds_send_drop_to+0x1620/0x1620 [ 2860.311974][ T4038] ? sock_sendmsg+0xdd/0x130 [ 2860.316614][ T4038] __sys_sendto+0x262/0x380 [ 2860.321169][ T4038] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2860.326610][ T4038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2860.332910][ T4038] ? put_timespec64+0xda/0x140 [ 2860.337764][ T4038] ? nsecs_to_jiffies+0x30/0x30 [ 2860.343830][ T4038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2860.349471][ T4038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2860.355058][ T4038] ? do_syscall_64+0x26/0x610 [ 2860.360462][ T4038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2860.367258][ T4038] __x64_sys_sendto+0xe1/0x1a0 [ 2860.373054][ T4038] do_syscall_64+0x103/0x610 03:35:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000074280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2860.378358][ T4038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2860.384588][ T4038] RIP: 0033:0x458209 [ 2860.388914][ T4038] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2860.421605][ T4038] RSP: 002b:00007f073007fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2860.430269][ T4038] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458209 [ 2860.439010][ T4038] RDX: 0000000000000480 RSI: 0000000020000a00 RDI: 0000000000000008 [ 2860.450507][ T4038] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2860.460519][ T4038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07300806d4 [ 2860.468623][ T4038] R13: 00000000004c58b8 R14: 00000000004d9838 R15: 00000000ffffffff [ 2860.476776][ T4038] [ 2860.479235][ T4038] Allocated by task 7933: [ 2860.483801][ T4038] save_stack+0x45/0xd0 [ 2860.488015][ T4038] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2860.493743][ T4038] kasan_slab_alloc+0xf/0x20 [ 2860.498630][ T4038] kmem_cache_alloc+0x11a/0x6f0 [ 2860.503663][ T4038] copy_net_ns+0xed/0x340 [ 2860.508084][ T4038] create_new_namespaces+0x400/0x7b0 [ 2860.513631][ T4038] unshare_nsproxy_namespaces+0xc2/0x200 [ 2860.519431][ T4038] ksys_unshare+0x440/0x980 [ 2860.523985][ T4038] __x64_sys_unshare+0x31/0x40 [ 2860.528928][ T4038] do_syscall_64+0x103/0x610 [ 2860.533595][ T4038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2860.539851][ T4038] [ 2860.539861][ T4038] Freed by task 8059: [ 2860.539884][ T4038] save_stack+0x45/0xd0 [ 2860.539900][ T4038] __kasan_slab_free+0x102/0x150 [ 2860.539923][ T4038] kasan_slab_free+0xe/0x10 [ 2860.546293][ T4038] kmem_cache_free+0x86/0x260 [ 2860.546309][ T4038] net_drop_ns.part.0+0x70/0x90 [ 2860.546318][ T4038] cleanup_net+0x538/0x960 [ 2860.546334][ T4038] process_one_work+0x98e/0x1790 [ 2860.546344][ T4038] worker_thread+0x98/0xe40 [ 2860.546357][ T4038] kthread+0x357/0x430 [ 2860.546369][ T4038] ret_from_fork+0x3a/0x50 [ 2860.546374][ T4038] [ 2860.546385][ T4038] The buggy address belongs to the object at ffff8880896d8080 [ 2860.546385][ T4038] which belongs to the cache net_namespace of size 8512 [ 2860.546396][ T4038] The buggy address is located 4 bytes inside of [ 2860.546396][ T4038] 8512-byte region [ffff8880896d8080, ffff8880896da1c0) [ 2860.546401][ T4038] The buggy address belongs to the page: [ 2860.546416][ T4038] page:ffffea000225b600 count:0 mapcount:-128 mapping:0000000000000000 index:0xffff8880896d8080 [ 2860.546427][ T4038] flags: 0x1fffc0000000000() [ 2860.546448][ T4038] raw: 01fffc0000000000 ffffea00014c5408 ffff88812fffc810 0000000000000000 [ 2860.619225][ T4003] kobject: 'kvm' (000000005d90fb7f): kobject_uevent_env [ 2860.625570][ T4038] raw: 0000000000000000 ffff8880896d8a00 0000000100000001 0000000000000000 [ 2860.625579][ T4038] page dumped because: kasan: bad access detected [ 2860.625584][ T4038] [ 2860.625588][ T4038] Memory state around the buggy address: [ 2860.625602][ T4038] ffff8880896d7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2860.625612][ T4038] ffff8880896d8000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2860.625623][ T4038] >ffff8880896d8080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2860.625630][ T4038] ^ [ 2860.625641][ T4038] ffff8880896d8100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2860.625651][ T4038] ffff8880896d8180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2860.625656][ T4038] ================================================================== [ 2860.625661][ T4038] Disabling lock debugging due to kernel taint [ 2860.625670][ T4038] Kernel panic - not syncing: panic_on_warn set ... [ 2860.625725][ T4038] CPU: 0 PID: 4038 Comm: syz-executor.3 Tainted: G B 5.1.0-rc1+ #34 [ 2860.625734][ T4038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.625739][ T4038] Call Trace: [ 2860.625777][ T4038] dump_stack+0x172/0x1f0 [ 2860.625799][ T4038] ? rds_cong_queue_updates+0x133/0x4d0 [ 2860.625831][ T4038] panic+0x2cb/0x65c [ 2860.649227][ T4003] kobject: 'kvm' (000000005d90fb7f): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2860.656852][ T4038] ? __warn_printk+0xf3/0xf3 [ 2860.656875][ T4038] ? lock_downgrade+0x880/0x880 [ 2860.656893][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.656910][ T4038] ? trace_hardirqs_off+0x62/0x220 [ 2860.656922][ T4038] ? trace_hardirqs_off+0x59/0x220 [ 2860.656935][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.656949][ T4038] ? rds_cong_queue_updates+0x133/0x4d0 [ 2860.656961][ T4038] end_report+0x47/0x4f [ 2860.656973][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.656984][ T4038] kasan_report.cold+0xe/0x40 [ 2860.657003][ T4038] ? __sanitizer_cov_trace_const_cmp2+0x10/0x20 [ 2860.657015][ T4038] ? rds_cong_queue_updates+0x209/0x4d0 [ 2860.657030][ T4038] check_memory_region+0x123/0x190 [ 2860.657047][ T4038] kasan_check_read+0x11/0x20 [ 2860.657061][ T4038] rds_cong_queue_updates+0x209/0x4d0 [ 2860.657082][ T4038] rds_recv_rcvbuf_delta.part.0+0x34f/0x3f0 [ 2860.657111][ T4038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.738114][ T4162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2860.742364][ T4038] rds_recv_incoming+0x789/0x11f0 [ 2860.742387][ T4038] ? rds_recv_rcvbuf_delta.part.0+0x3f0/0x3f0 [ 2860.742415][ T4038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2860.823271][ T3876] kobject: 'loop0' (00000000bac7b33f): kobject_uevent_env [ 2860.828457][ T4038] rds_loop_xmit+0xf3/0x2a0 [ 2860.828471][ T4038] ? rds_loop_inc_free+0x20/0x20 [ 2860.828489][ T4038] rds_send_xmit+0x1113/0x2560 [ 2860.828514][ T4038] ? rds_send_ping+0x130/0x130 [ 2860.848755][ T3876] kobject: 'loop0' (00000000bac7b33f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2860.849911][ T4038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.849933][ T4038] rds_sendmsg+0x3017/0x3550 [ 2860.849957][ T4038] ? rds_send_drop_to+0x1620/0x1620 [ 2860.946084][ T3876] kobject: 'loop1' (00000000c62261c8): kobject_uevent_env [ 2860.948466][ T4038] ? aa_sk_perm+0x288/0x880 [ 2860.983647][ T3876] kobject: 'loop1' (00000000c62261c8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2860.986660][ T4038] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 2861.002631][ T4038] ? apparmor_socket_sendmsg+0x2a/0x30 [ 2861.002650][ T4038] ? rds_send_drop_to+0x1620/0x1620 [ 2861.002666][ T4038] sock_sendmsg+0xdd/0x130 [ 2861.002679][ T4038] ? rds_send_drop_to+0x1620/0x1620 [ 2861.002754][ T4038] ? sock_sendmsg+0xdd/0x130 [ 2861.002772][ T4038] __sys_sendto+0x262/0x380 [ 2861.002789][ T4038] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2861.002814][ T4038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2861.002828][ T4038] ? put_timespec64+0xda/0x140 [ 2861.002840][ T4038] ? nsecs_to_jiffies+0x30/0x30 [ 2861.002861][ T4038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2861.002876][ T4038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2861.002891][ T4038] ? do_syscall_64+0x26/0x610 [ 2861.002907][ T4038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.002924][ T4038] __x64_sys_sendto+0xe1/0x1a0 [ 2861.002941][ T4038] do_syscall_64+0x103/0x610 [ 2861.002958][ T4038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.002970][ T4038] RIP: 0033:0x458209 [ 2861.002986][ T4038] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2861.002993][ T4038] RSP: 002b:00007f073007fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2861.003008][ T4038] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458209 [ 2861.003017][ T4038] RDX: 0000000000000480 RSI: 0000000020000a00 RDI: 0000000000000008 [ 2861.003024][ T4038] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2861.003032][ T4038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07300806d4 [ 2861.003040][ T4038] R13: 00000000004c58b8 R14: 00000000004d9838 R15: 00000000ffffffff [ 2861.004100][ T4038] Kernel Offset: disabled [ 2861.194382][ T4038] Rebooting in 86400 seconds..