0x4, 0x0) syz_open_procfs(0x0, 0x0) 17:33:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3303.723021][ T4639] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:33:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:57 executing program 2: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:33:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:33:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:33:57 executing program 2: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:33:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:33:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3304.211706][ T4780] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:33:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:33:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:33:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) close(r2) close(r1) 17:33:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:33:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3304.657329][ T4906] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:33:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) close(r2) close(r1) 17:33:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:33:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:33:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:33:59 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:33:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) close(r2) close(r1) 17:33:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3305.578800][ T5046] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:33:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:33:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000), 0x0) close(r2) close(r1) 17:33:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3305.942912][ T5178] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:33:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:33:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) 17:33:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000), 0x0) close(r2) close(r1) 17:33:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:33:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) [ 3306.530310][ T5292] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000), 0x0) close(r2) close(r1) 17:34:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) [ 3306.808598][ T5417] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(0xffffffffffffffff) close(r1) [ 3307.482669][ T5536] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(0xffffffffffffffff) close(r1) 17:34:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3307.812816][ T5663] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(0xffffffffffffffff) close(r1) 17:34:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3308.508282][ T5882] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(0xffffffffffffffff) 17:34:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3308.745344][ T6007] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3309.443085][ T6137] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(0xffffffffffffffff) 17:34:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3309.817833][ T6277] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a020000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3310.513431][ T6410] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(0xffffffffffffffff) 17:34:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r2, @ANYBLOB='(\x00']) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 3311.593513][ T6661] net_ratelimit: 1 callbacks suppressed [ 3311.593523][ T6661] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3312.005646][ T6858] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3312.770998][ T7038] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3313.163227][ T7264] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52020000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3313.779584][ T7385] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3314.326309][ T7644] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3314.663156][ T7758] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3315.121999][ T7980] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72020000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3315.789281][ T8205] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3316.060644][ T8323] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) 17:34:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3316.750167][ T8555] net_ratelimit: 1 callbacks suppressed [ 3316.750177][ T8555] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x2) 17:34:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3317.072456][ T8678] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa010000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x3) 17:34:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4) 17:34:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3318.043473][ T9028] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4020000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x5) 17:34:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6) 17:34:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3319.133106][ T9375] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', 0x0, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7) 17:34:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(0x0, &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', 0x0, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x8) 17:34:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', 0x0, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', 0x0, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3320.313767][ T9731] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xa) 17:34:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3320.922952][ T9848] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xe) 17:34:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3321.357145][ T9975] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4020000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf) 17:34:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r3, @ANYBLOB='(\x00']) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r6) keyctl$update(0x2, r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r4, @ANYBLOB='(\x00']) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r2, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r8 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r7) keyctl$update(0x2, r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0100073d0600080007000400090001000400"], 0x16) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r4, @ANYBLOB='(\x00']) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r2, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r8 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r7) keyctl$update(0x2, r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0100073d0600080007000400090001000400"], 0x16) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x10) 17:34:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz'}, &(0x7f00000010c0)='\x00', r3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3322.315474][T10222] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2020000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r2, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r4, @ANYBLOB='(\x00']) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r2, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r8 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r7) keyctl$update(0x2, r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0100073d0600080007000400090001000400"], 0x16) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x7, 0x6, 0x3, 0x200, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x81}, 0x1, [0x7, 0xff0000000000, 0xfffffffffffffffc, 0x100, 0x9, 0x7ff, 0x401, 0x3, 0x3, 0x1ff, 0x1, 0x0, 0x401, 0xfffffffffffffffe, 0x3ff, 0x2, 0x2, 0x7, 0x7fff, 0x3, 0x100000000, 0x40, 0x1, 0x38b3, 0x3, 0x2ec7, 0x3, 0x8, 0x20, 0x400, 0x200, 0x6, 0x5, 0xfcf6, 0x6, 0x4, 0x4, 0x0, 0x7, 0x1, 0x10000, 0x0, 0x9, 0xfffffffffffffff7, 0x2, 0x4, 0x8001, 0x2, 0xb31, 0x10001, 0x9, 0x9, 0x7, 0xffffffffffff05b2, 0x4305, 0x7, 0x97f, 0x5, 0x3ff, 0x0, 0x80000000, 0xfffffffffffffe00, 0x8, 0x9, 0x1, 0x9, 0x6, 0x4, 0x28a, 0x100000001, 0xfffffffffffffffa, 0xff, 0xd0e, 0x40, 0x7ff, 0x9, 0x4, 0xfffffffffffff1af, 0x7fffffff, 0x13, 0xc86, 0x3, 0x1, 0x10001, 0xffffffff, 0x7fffffff, 0x1f, 0x3f, 0x6, 0x100, 0x4, 0x0, 0x7, 0x1, 0x9dc4, 0x2, 0x6afc, 0x1f, 0xfffffffffffffbff, 0x80000000, 0xff7, 0xbea3, 0x5, 0xfffffffffffffffe, 0x80000000, 0x4, 0x2, 0x40, 0x7, 0x0, 0x8, 0x5, 0x7f, 0x7fffffff, 0x12, 0xe, 0xffff, 0x7f, 0x4, 0x4, 0x7f, 0xeb10, 0x0, 0x93fb, 0x8, 0x1, 0x2, 0xc1a6], {0x77359400}}) socket$inet_udp(0x2, 0x2, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x48) 17:34:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x84, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @empty, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x81, @mcast2, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000001c0)=0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000317,mode=00000000 00000000000000,euid>', @ANYRESDEC=r4, @ANYBLOB='(\x00']) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$binfmt_elf32(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x4, 0x3, 0x3, 0x81, 0x2e8, 0x38, 0x20c, 0x2, 0xfffffffffffffff8, 0x20, 0x1, 0xe2, 0x8, 0x100000001}, [{0x5, 0x4, 0x101, 0x4, 0x8, 0x8, 0x3, 0x5}], "b00f4a309a781628b619071f880eb625f426783e8baed520cba7f5585b5c238c32d740678101fd1646084475b4d190d6f5a6e821f6883bc534f9591311f56d290e46000c897dc46855875da4c011bd019ed27bb20522e7a8c0cba142e463ecf27cf0aeac037ed06a9f52c2cc5330d640ff3048700dcf46295ac6a36a5bc770fe3e2292f41f6f367cb19fbd7ccc298783c7da32a4339cd82e830258082856cefbe2b767a0646584e7f998d6477be396cd785f76b8cee564ed45e69399309355bd6753a8e509904fee48bee07a9de0702e6eeaeaa9d95d4837f385a9b380e543fe7b47b3", [[], [], [], [], [], []]}, 0x73b) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000000) ioctl$int_in(r2, 0x5421, &(0x7f0000000400)=0xff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000040)={0x0, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = add_key(&(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="ba1ffd50b10412918cf9b595bb7806d4fc7f69eedc224f054ecfef084cce08d51a633f4fb81a5cb7ec80bcc22a2bd821c2b775e3b7eb66c93d4d2f1ab96b50187d4696a17b81bd443aee77c696b929f5b28a5e8fe5b3eb4207dda6c495b19a", 0x5f, 0xfffffffffffffffb) r8 = request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000010c0)='\x00', r7) keyctl$update(0x2, r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0100073d0600080007000400090001000400"], 0x16) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000240)={{0x7, 0x6, 0x3, 0x200, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x81}, 0x1, [0x7, 0xff0000000000, 0xfffffffffffffffc, 0x100, 0x9, 0x7ff, 0x401, 0x3, 0x3, 0x1ff, 0x1, 0x0, 0x401, 0xfffffffffffffffe, 0x3ff, 0x2, 0x2, 0x7, 0x7fff, 0x3, 0x100000000, 0x40, 0x1, 0x38b3, 0x3, 0x2ec7, 0x3, 0x8, 0x20, 0x400, 0x200, 0x6, 0x5, 0xfcf6, 0x6, 0x4, 0x4, 0x0, 0x7, 0x1, 0x10000, 0x0, 0x9, 0xfffffffffffffff7, 0x2, 0x4, 0x8001, 0x2, 0xb31, 0x10001, 0x9, 0x9, 0x7, 0xffffffffffff05b2, 0x4305, 0x7, 0x97f, 0x5, 0x3ff, 0x0, 0x80000000, 0xfffffffffffffe00, 0x8, 0x9, 0x1, 0x9, 0x6, 0x4, 0x28a, 0x100000001, 0xfffffffffffffffa, 0xff, 0xd0e, 0x40, 0x7ff, 0x9, 0x4, 0xfffffffffffff1af, 0x7fffffff, 0x13, 0xc86, 0x3, 0x1, 0x10001, 0xffffffff, 0x7fffffff, 0x1f, 0x3f, 0x6, 0x100, 0x4, 0x0, 0x7, 0x1, 0x9dc4, 0x2, 0x6afc, 0x1f, 0xfffffffffffffbff, 0x80000000, 0xff7, 0xbea3, 0x5, 0xfffffffffffffffe, 0x80000000, 0x4, 0x2, 0x40, 0x7, 0x0, 0x8, 0x5, 0x7f, 0x7fffffff, 0x12, 0xe, 0xffff, 0x7f, 0x4, 0x4, 0x7f, 0xeb10, 0x0, 0x93fb, 0x8, 0x1, 0x2, 0xc1a6], {0x77359400}}) socket$inet_udp(0x2, 0x2, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3323.071339][T10356] QAT: Invalid ioctl [ 3323.097270][T10361] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r2, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5412, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 3323.347408][T10473] QAT: Invalid ioctl 17:34:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4c) 17:34:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r2, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) [ 3323.507071][T10500] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3323.579689][T10504] QAT: Invalid ioctl 17:34:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5412, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:34:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) poll(&(0x7f0000000100)=[{r2, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x50) [ 3324.140168][T10618] QAT: Invalid ioctl 17:34:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5412, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:34:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) poll(&(0x7f0000000100)=[{r2, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) [ 3324.181067][T10621] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3324.286292][T10651] QAT: Invalid ioctl 17:34:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) poll(&(0x7f0000000100)=[{r2, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGLCKTRMIOS(r0, 0x5412, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) [ 3324.447822][T10740] QAT: Invalid ioctl 17:34:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x60) 17:34:18 executing program 3 (fault-call:8 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:18 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3325.035107][T10754] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3325.059251][T10757] QAT: Invalid ioctl 17:34:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3325.150809][T10796] FAULT_INJECTION: forcing a failure. [ 3325.150809][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.220207][T10796] CPU: 0 PID: 10796 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 3325.228128][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3325.230353][T10870] QAT: Invalid ioctl [ 3325.238179][T10796] Call Trace: [ 3325.238252][T10796] dump_stack+0x172/0x1f0 [ 3325.238276][T10796] should_fail.cold+0xa/0x15 [ 3325.238297][T10796] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3325.260137][T10796] ? ___might_sleep+0x163/0x280 [ 3325.264997][T10796] __should_failslab+0x121/0x190 [ 3325.269935][T10796] should_failslab+0x9/0x14 [ 3325.269950][T10796] kmem_cache_alloc_node_trace+0x270/0x720 [ 3325.269968][T10796] ? mark_held_locks+0xf0/0xf0 [ 3325.280411][T10796] ? lock_sock_nested+0xac/0x120 [ 3325.280433][T10796] __kmalloc_node+0x3d/0x70 [ 3325.280451][T10796] kvmalloc_node+0x68/0x100 [ 3325.280467][T10796] vmemdup_user+0x27/0xb0 [ 3325.280540][T10796] sctp_setsockopt_bindx+0x49/0x3b0 [ 3325.280559][T10796] sctp_setsockopt+0x1c08/0x68a0 [ 3325.313628][T10796] ? sctp_setsockopt_paddr_thresholds+0x540/0x540 [ 3325.320046][T10796] ? kasan_check_read+0x11/0x20 [ 3325.324914][T10796] ? ___might_sleep+0x163/0x280 [ 3325.329774][T10796] ? __might_sleep+0x95/0x190 [ 3325.334461][T10796] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 3325.340142][T10796] ? aa_sk_perm+0x288/0x880 [ 3325.340167][T10796] ? aa_sock_opt_perm.isra.0+0xa1/0x130 [ 3325.340190][T10796] sock_common_setsockopt+0x9a/0xe0 [ 3325.340207][T10796] __sys_setsockopt+0x180/0x280 [ 3325.340224][T10796] ? kernel_accept+0x310/0x310 [ 3325.350239][T10796] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3325.350253][T10796] ? do_syscall_64+0x26/0x610 [ 3325.350271][T10796] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3325.381195][T10796] ? do_syscall_64+0x26/0x610 [ 3325.385887][T10796] __x64_sys_setsockopt+0xbe/0x150 [ 3325.388929][T10921] QAT: Invalid ioctl [ 3325.391000][T10796] do_syscall_64+0x103/0x610 [ 3325.391021][T10796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3325.391038][T10796] RIP: 0033:0x458079 [ 3325.409248][T10796] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3325.432858][T10796] RSP: 002b:00007f0134af1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3325.441266][T10796] RAX: ffffffffffffffda RBX: 00007f0134af1c90 RCX: 0000000000458079 [ 3325.449237][T10796] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000005 [ 3325.457207][T10796] RBP: 000000000073bfa0 R08: 0000000000000010 R09: 0000000000000000 17:34:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x2, 0x0, &(0x7f0000000080)) 17:34:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x3, 0x0, &(0x7f0000000080)) [ 3325.465174][T10796] R10: 0000000020000000 R11: 0000000000000246 R12: 00007f0134af26d4 [ 3325.473145][T10796] R13: 00000000004ccb08 R14: 00000000004da8f8 R15: 0000000000000006 17:34:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r1, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x68) 17:34:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) wait4(r1, 0x0, 0x1000004, &(0x7f00000000c0)) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xff, 0x8000) write$FUSE_LSEEK(r2, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x7}}, 0x18) 17:34:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:19 executing program 3 (fault-call:8 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3326.071237][T10992] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc899, 0x20000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r1, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) 17:34:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000240)='syz', 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6c) 17:34:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r1, 0x100}, {r0, 0x1}, {r0, 0x40}], 0x3, 0x1) [ 3326.325826][T11114] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockname$netrom(r1, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @bcast, @bcast, @remote, @default, @rose, @null]}, &(0x7f0000000040)=0x48) 17:34:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x2, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x74) 17:34:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) [ 3326.978813][T11233] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000000c0)) 17:34:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x3, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7a) 17:34:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) [ 3327.277288][T11356] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)=0x110) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x500, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) 17:34:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x4, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf0) 17:34:21 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000000)) 17:34:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0xffffffff, 0x6]) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3327.927708][T11480] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x5, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3328.047272][T11547] QAT: Invalid ioctl 17:34:21 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x300) [ 3328.269645][T11607] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x100000001, 0x20400) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x10, 0x4, 0x2}, 0x5}}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x2, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x6, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x500) 17:34:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400001, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400201) getsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3328.845859][T11720] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x7, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:22 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x18040) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000100)=0x81) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x5, 0x2b}, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x600) 17:34:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x8, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:23 executing program 5: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x189000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x20200, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2d0, 0x13, 0x8, 0x500, 0x70bd2c, 0x25dfdbfd, {0xc, 0x0, 0x6}, [@typed={0x8, 0x82, @str='\r\x00'}, @typed={0x8, 0x29, @fd=r1}, @nested={0xc4, 0x29, [@generic="2efed52776434f7e39417acae3abf5b7dbacf397b2fc333336192714059cc826ec018b8ba1633c35aa0e901392985dda7c84fce4b75bad719382f298f9a3755d09c269ad6e2113e1c8de702fc9647c59b85166edecb815b65e271123abe402dac04b4e84a69fc8ff22c4392b3ac690c821dfc1bb322c04dbb2e48455e29d7d675c73740288080460f49c241f2a08ba0067c7919d96d2086e4db4a853b0a85eb417773f8df13e5b8391232af2692818a984b71d6698514d92f38c9f35a05135"]}, @typed={0xd4, 0x75, @binary="8258b1bf21ac87129d524e4c87e2fd8bb5dfb2d04c5f937803adff8afdf79b9c7c52b98997957627f02d76d28b8042691678576b8e53ceeca1980da06b187902ae51cb3e86ff96cdafea29090c32211367e9f8bcb871fb859993dcc2b12d31f21b27c8f95f82b74350c07c5652f9303b9ca0bc0b3d42b23d82c411006a41d49ac3942cd9678cd7aaf6cc25163267688ea007f76fef7b52ba6b05f5dd832033513dd74022c79ba583933c672ecfe0b6c1d0a427353f4932e682359770d9b7bc09fad317c1688dc200b192df9033"}, @nested={0xf0, 0x4a, [@generic="1cbcbaecdd24dd017ec9377d6c649b4b0b8218598bfd758840706032b9259ffaf89135637dfbe6d6f6dbb738a1b0d43f7c5698f954df38af87eb4c67b72a590be6dbe82b9c62648719c682176e64d710f31e3306799b235597266d80e24bd91e6d9fc720257505b932a911eb9f8bfb8c5410337b01faacfde9649707f6025d90eb66ed4bb9eb7b93234e599111af3da0d95216f6ce3bb91cfdc2207ef06d394775ecb0d2d13fca406836c0afe5ff7114042d117c164c1e5de58f15b32a26bad5801d436966b1a1aa096beaa264a657ffae02b7f111b6564c7852ddddeaee88a70e1eddca6a048ac452e436"]}, @typed={0x24, 0x45, @binary="4b4a3efc92ccbb36c59685695f0101a315c206ea4a59bb5e12347f5209"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 17:34:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 3329.736947][T11860] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x7, 0x8000}, 0x4) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 17:34:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x9, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}], 0x3, 0x1) 17:34:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x700) 17:34:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(0x0, 0x0, 0x1) 17:34:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0xa, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'sit0\x00', 0x3}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000140)={0x0, 0x2, 0x1, {0x81, 0xffffffffffffffff, 0x100000002, 0xfffffffffffffffb}}) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000280)="5b055101930efdbfcdc03afbf2071c98aea6543e9fb15ca9ca24f37396943990f46d1b09d5f3b9d4737eee317d4d767633ce6b96a083eac3736bbb5cba5047cffcde16f26282bd57f349eea47efec77638", 0x51) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x2}}, 0x18) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl(r0, 0x5, &(0x7f0000000d80)="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") ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000100)=r3) 17:34:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(0x0, 0x0, 0x1) 17:34:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = getpgid(0xffffffffffffffff) r3 = dup(r0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r3, r0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0x5) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e0010000000100ffe002010000254e6cb3ce886115a2129962763b60d6e154d88d61c51cd7310a24e74b1bbb24015d5ecaf7d3f8cf94a70b1defbea110bb7bd6e86f60b5e8f68b5d3bbf06d2fc"], 0x80}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000300)={0x2, 0xe, 0xa, 0x7, 0x0, 0x2, 0x4, 0x17}) [ 3330.596509][T12004] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 17:34:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0xb, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:24 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(0x0, 0x0, 0x1) 17:34:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xa00) 17:34:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, 0x0, 0x0, 0x0) [ 3330.918400][T12134] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe030000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup3(r0, r0, 0x80000) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x100, &(0x7f0000000040)=0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}, {0xffffffffffffffff, 0x1}], 0x2, 0x1) 17:34:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 17:34:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0xc, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xe00) 17:34:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x20000000001, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{r0, 0x100}], 0x1, 0x1) 17:34:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, 0x0, 0x0, 0x0) [ 3331.555217][T12251] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0xd, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff85883a9c, 0x200000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001100)={r2, 0xfffffffffffffe00}, &(0x7f0000001140)=0x8) 17:34:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x0) 17:34:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100), 0x0, 0x1) 17:34:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf00) 17:34:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', 0x0, 0x101, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000180)="fbc823f6c3086603d008d7ee079ab5874a187eb73dc3b1f5aab2198744f2d6f1d417d5f1fd9cce84cf0ebba115d8b4847ccf5108c6ad1c8faf285ef62329c7b155574c08ff9b6171c8879c886cb154d6860555e467", 0x55, 0xc1}, {&(0x7f0000000200)="cadb2472144b8756d5f24705e60f57b843b5b01af1b22b19807808b36a8a44919e9b2846ec8884662b09e8d9daef334223", 0x31, 0x7fff}, {&(0x7f0000000240)="ef6b16c0c21e81c75bf064cb1cbffdd05161adf666305ded7c27be39b3dd31e991380ede93aa238829185cff9e10a50f3ef2b44d07ca59485031626390e4fa769974e0221441b44b91188499eae34ede022ff8565bcc6c4f5c1a7487c73c778a35e1feaafc642a33df9616fb608dee", 0x6f, 0x7}], 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB="696e6c696e655f646174612c6a71666d743d76667376312c6261636b67726f756e645f67633d6f6e2c6a71666d743d76667376302c6d6f64653d6c66732c6d6561737572652c686173682c66736e616d653d83776c616e316b657972696e676d696d655f7479706576626f786e6574305d25252c66736e616d653d65746831656d312b2d776c616e30657468315e2c666f776e65723e", @ANYRESDEC=r1, @ANYBLOB="2c7375626a2f738d6377e4"]) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x10000, 0x0) fchown(r3, r1, r2) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000640)=0x400) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x220, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1000, 0x3]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xb9f, 0x100]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="aef2370c3885beb586efb063369a30b0"}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x44000) 17:34:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x0) 17:34:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x0) [ 3332.228144][T12398] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100), 0x0, 0x1) 17:34:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000000)) 17:34:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x11, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:25 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100), 0x0, 0x1) 17:34:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) 17:34:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x2000) 17:34:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}], 0x1, 0x1) 17:34:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x12, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) 17:34:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:26 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}], 0x1, 0x1) 17:34:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) [ 3333.160476][T12540] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x13, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:34:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4800) [ 3333.511807][T12668] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0) 17:34:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x100}], 0x1, 0x1) 17:34:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = msgget$private(0x0, 0x200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) readlinkat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/211, 0xd3) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000001bc74995adeeb12682dd9fc20e51274f1f7a9dd8caa96b7433522e0433a8aaef610e5959e"], 0x2d, 0x800) 17:34:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x14, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4c00) 17:34:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x1) 17:34:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) creat(&(0x7f0000000100)='./bus\x00', 0x13f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x1647, 0x0, 0x8000c00, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3334.077898][T12783] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0) 17:34:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x15, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x5000) 17:34:27 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) [ 3334.386394][T12909] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000001180), 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000780)='cifs.spnego\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r2, 0x40084503, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0) 17:34:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write(r0, &(0x7f0000000240)="91fb96409248634fdb9d764eeefdfbdc904c0305d07548bb589a23dc8348aa5b1e4f7d2fb99a29dd5b7fcd129eed8840b7f38d3408b270f8cd8c8b3c3b305a8c3c7446f5a5c8052b5fe992226c86a1d030903993ac5e7863a98c5f02994420375b2144f3926a1b39a6e0b90b27b70c5de632771c684adb99e7bda333f2804a0818044c71b3d6fd9441c90e7711d8293a55bda1767ee72d2034b231bd08d246286cbc699d8a6f779fb0cb76c5b5e7dba8f849cdd2871ee7074faa8c9d1b08f9dfbcf6dfbf8b9baafc1f1ab5cf279deb12d78b0ad787babb0c9a186d34c27d3f3302220c1494b439b3dd7550ef6b3a6c2629695d53262b661898", 0xf9) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) write(r0, &(0x7f0000000140)="9ff106c5d8ddc2a0181e7cb8b88011a2f52c6d0bb632a2fffb4d68ceff41fbaefc6814829c8f117b5b30db7fd9191ebac0d67896400ae62d517c2b959de2561825661450aec299931c21baeda1aa47104aab9fddf94ccab45d151525ee11fac9c5fc5513993b78fc2e8c0937d52ea435df96d18fb8d409fbe8d226c54a6092dceb4d676ae80dca94ca4254a13c67b36990291e335feeeee775b6b92e528aa68ba7160235df6a3429e45854da3ed77b2578a6db2d42ecc66148686414b93c4df3d3632fed8464cacb70732b0f6580a1fc0dd9afcf407d895fa5ca137e45ec0186d5e5f5b614ed5d1570", 0xe9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000100)=0x608cad9f84d9ec70) 17:34:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040), 0x0) close(r2) close(r1) 17:34:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x16, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x5aec) 17:34:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) open(&(0x7f0000000000)='./file0\x00', 0x94400, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 3335.006030][T13022] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:28 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6, 0xffffffffffffffff}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x0, @dev, 0x4e23, 0x0, 'rr\x00', 0x25, 0x80, 0x67}, 0x2c) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x17, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:28 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x345, 0x400000) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) 17:34:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6000) [ 3335.394799][T13354] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x18, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000280), 0x4) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x7ff, 0x5000}) 17:34:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6800) 17:34:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6, 0xffffffffffffffff}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x0, @dev, 0x4e23, 0x0, 'rr\x00', 0x25, 0x80, 0x67}, 0x2c) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 3336.065587][T13567] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1ff, 0x400000) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000000c0)="73dcfd4d041b9f7604ba9c2d654cfd97ed4f6835f1a06746057a0d9f995b1410de130d547ef1bf23b571d5bab319bc311bdd0eba1c2ef9d0fc9fee51842890acad97ca6cf3363fa389b2f741668475e688a42bb10d1214cff57e7049a4810283e9236237018fc753a261c8081dce4d2a8dd6922620b67d3edfc8492b291136703edb0a7cc2a7bfc04e2e36d7357d6e4f271f447294b6820b6faf99b3ba3c4d782bf4fd99297f1b185c74d2007326328d1a3578f52f17a820d2f53da201594e5f890545525f1001451ef56b917849c45a16bc") 17:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x402c542b, 0x0) 17:34:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6, 0xffffffffffffffff}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x0, @dev, 0x4e23, 0x0, 'rr\x00', 0x25, 0x80, 0x67}, 0x2c) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x19, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6c00) 17:34:29 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 17:34:29 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x0, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 17:34:29 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0x1}, 0xf) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x28080, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x2) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3336.381436][T13696] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:30 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0xc02, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0xffffffffffffff81, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20000811) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x80) sendmsg$nl_crypto(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280100001300000a29bd7000fddbdf25647262675f70725f73686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000004000000000000000000000800010000800000080001000000000008000100370e000008000100f8ffffff08000100ff00000008000100030000000800010004000000080001000700000008000100ffff0000a9d1158391d25a07d000433dd99b63706ef80c54437b2ec60fbbaac3dd0fcbf573941f5f58288b4c8305fb3c75e702e21ab33205622bed3f4f211f5ffc96cf01b02a5344166445fbd4abd996e4c23d6accd7adcf81699ce5a7e88f7b377c35bb2d77126362f07fbca348b7927436b7369df7954c25aba91a56b65613a4a6bca39231f62b1395891886746dbe830bdb0caacb96f99bba40169cd7e1bacc9b"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 17:34:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40000000000005, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000000)) 17:34:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7400) 17:34:30 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:34:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10c00, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3337.108779][T13924] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@null=' \x00', 0xf, 'bridge0\x00'}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000180)={0x8b0, "8255a01905536774789583710094d164514a05cc318ddfcdff533884dec973e4", 0x2, 0x5, 0x3, 0x50007, 0x40004, 0x2}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x180000000000000, 0x501800) openat(r2, &(0x7f0000000140)='./file0\x00', 0x20000, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0xfc, @dev={0xfe, 0x80, [], 0x24}, 0x8}, 0x1c) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4000000000000000, 0x400001) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7f) 17:34:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x21, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7a00) 17:34:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6(0xa, 0x1, 0x93) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3337.455965][T14144] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xec5a) 17:34:31 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x80800) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101400, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000040)={0x6, 0x100}) 17:34:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a02000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x23, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6, 0xffffffffffffffff}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) fanotify_init(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x0, @dev, 0x4e23, 0x0, 'rr\x00', 0x25, 0x80, 0x67}, 0x2c) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:31 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:34:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)=0xfffffffffffffdcc) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000000)={0x1000, &(0x7f00000004c0)=""/4096}) 17:34:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x24, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)=0xfffffffffffffe80) 17:34:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf000) 17:34:31 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6, 0xffffffffffffffff}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) fanotify_init(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x0, @dev, 0x4e23, 0x0, 'rr\x00', 0x25, 0x80, 0x67}, 0x2c) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffd, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3338.413591][T14598] net_ratelimit: 1 callbacks suppressed [ 3338.413601][T14598] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:32 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000200)={0x3, 'syz1\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x3f, {{0x2, 0x0, @empty}}}, 0x88) syz_open_dev$rtc(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, {0x700, 0x0, 0x2, 0x0, 0x6, 0xffffffffffffffff}, 0x300000000000000}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) fanotify_init(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x0, @dev, 0x4e23, 0x0, 'rr\x00', 0x25, 0x80, 0x67}, 0x2c) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 17:34:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:32 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:34:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000040)) 17:34:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x34000) 17:34:32 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:34:32 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfffffffffffffe01, 0xc00) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001740)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000001840)=0xe8) bind$bt_hci(r0, &(0x7f0000001880)={0x1f, r1, 0x3}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 3338.864639][T14725] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000400)='queue1\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\xa9\x8b+\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 17:34:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x400300) 17:34:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000200)=""/218) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3339.216778][T14947] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:34:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000000)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r5 = getpgrp(0x0) setpgid(r4, r5) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r6, 0x400) eventfd(0x7) 17:34:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x71, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:34:33 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:34:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140)=0x8, 0x4) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_FPEMU(0xa, 0x2) 17:34:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf0ffff) 17:34:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x72, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:34:33 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x800, 0x480) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000380)=0x2, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000300)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r3 = fcntl$getown(r1, 0x9) exit_group(0x4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={[], 0x9, 0x8000, 0x10000, 0x8, 0x7, r3}) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x80) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f00000003c0)={0x8, 0x1, 0x2, 0xfffffffffffffffc, '\x00', 0x50}) r6 = getuid() setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x81, 0xff, r5, r6}, {0x162def64, 0x7fff, 0xffffffffffffffff, 0x81, 0x0, 0xffff, 0x4}, {0x8, 0x3ff, 0x1f2, 0xf1}, 0x7fff, 0x6e6bbf, 0x0, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d2, 0x3f}, 0xa, @in6=@rand_addr="e520e4bea20272dfc4f5cbd710fac191", 0x3503, 0x0, 0x2, 0xffff, 0x6, 0x8, 0x1}}, 0xe8) 17:36:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5434, 0x0) 17:36:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000000)=0xfffffdec) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0xfcd4, 0x0, 0x1afdde12034afa2e, 0x70bd2c, 0x25dfdc00, {}, [@SEG6_ATTR_HMACKEYID, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x400, 0x200000000000000, 0x4, 0x7]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8f37}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20008884) 17:36:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x75, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x1000000) 17:36:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5202000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 3427.024948][T15296] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfff, 0x202000) set_robust_list(&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x80000001}, 0x18) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x7c) 17:36:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x76, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000140)={0xffffffff, 0x0, 0x101, @random="d959c8d15423", 'rose0\x00'}) recvfrom(r0, &(0x7f0000000000)=""/23, 0x17, 0x10042, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0x0, @local, 0x3ff}}}, 0x80) 17:36:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x2000000) [ 3427.271131][T25478] device bridge_slave_1 left promiscuous mode [ 3427.277404][T25478] bridge0: port 2(bridge_slave_1) entered disabled state 17:36:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020b00044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000080)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) [ 3427.373724][T25478] device bridge_slave_0 left promiscuous mode [ 3427.388589][T25478] bridge0: port 1(bridge_slave_0) entered disabled state 17:36:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) [ 3427.657491][T25478] device hsr_slave_1 left promiscuous mode [ 3427.719239][T25478] device hsr_slave_0 left promiscuous mode [ 3427.779593][T25478] team0 (unregistering): Port device team_slave_1 removed [ 3427.817999][T25478] team0 (unregistering): Port device team_slave_0 removed [ 3427.859245][T25478] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 3428.057053][T25478] bond0 (unregistering): Released all slaves [ 3429.249587][T15537] IPVS: ftp: loaded support on port[0] = 21 [ 3429.333305][T15537] chnl_net:caif_netlink_parms(): no params data found [ 3429.373210][T15537] bridge0: port 1(bridge_slave_0) entered blocking state [ 3429.382739][T15537] bridge0: port 1(bridge_slave_0) entered disabled state [ 3429.391103][T15537] device bridge_slave_0 entered promiscuous mode [ 3429.398610][T15537] bridge0: port 2(bridge_slave_1) entered blocking state [ 3429.406051][T15537] bridge0: port 2(bridge_slave_1) entered disabled state [ 3429.414181][T15537] device bridge_slave_1 entered promiscuous mode [ 3429.430718][T15537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 3429.440267][T15537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 3429.458217][T15537] team0: Port device team_slave_0 added [ 3429.465187][T15537] team0: Port device team_slave_1 added [ 3429.522687][T15537] device hsr_slave_0 entered promiscuous mode [ 3429.570312][T15537] device hsr_slave_1 entered promiscuous mode [ 3429.628849][T15537] bridge0: port 2(bridge_slave_1) entered blocking state [ 3429.635990][T15537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3429.643336][T15537] bridge0: port 1(bridge_slave_0) entered blocking state [ 3429.650414][T15537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3429.682638][T15537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3429.695166][T25477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3429.704202][T25477] bridge0: port 1(bridge_slave_0) entered disabled state [ 3429.713959][T25477] bridge0: port 2(bridge_slave_1) entered disabled state [ 3429.722698][T25477] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3429.736277][T15537] 8021q: adding VLAN 0 to HW filter on device team0 [ 3429.746533][T28675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3429.755136][T28675] bridge0: port 1(bridge_slave_0) entered blocking state [ 3429.762293][T28675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3429.775641][T26291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3429.784392][T26291] bridge0: port 2(bridge_slave_1) entered blocking state [ 3429.791506][T26291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3429.810107][T28494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3429.818476][T28494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3429.831813][T28675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3429.846917][T15537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3429.857544][T15537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3429.869540][T28675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3429.878563][T28675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3429.886896][T28675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3429.906186][T15537] 8021q: adding VLAN 0 to HW filter on device batadv0 17:36:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x77, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x3000000) 17:36:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6203000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000000)=')-/vboxnet1\x00', 0xffffffffffffffff}, 0x30) capget(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x20, 0x5, 0x0, 0x1, 0x8, 0xbcf3}) 17:36:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x201, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f00000000c0)={@empty, @remote, @empty}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x5, 0x4) [ 3430.004490][T15551] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x78, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x8c0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 17:36:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4000000) 17:36:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x40001, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000300)={0x6, 0x2, 0x200, 0x3, 0x4, 0xa02, 0x8, 0x1200, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r2, 0x400, 0x1, 0x3}, &(0x7f00000003c0)=0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1, 0x1, 0x9, 0xc5d6, 0x0, 0x6c, 0x0, 0x0, 0x7, 0x7, 0x80, 0x1f, 0xffff, 0x100000000, 0x1, 0xc644, 0x1305, 0x9, 0x8001, 0x8000000000000000, 0xff, 0x6, 0x1, 0x8, 0x7fffffff, 0x9, 0xffffffff, 0x8d1d, 0x9, 0x6, 0x6, 0xffff, 0x9, 0x8, 0x1f, 0x0, 0x0, 0x100000000, 0x6b263923d8a75ab, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x4b4, 0xd6e, 0x8, 0x100, 0x1, 0x3}, r3, 0x10, r4, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="d1"], 0x10) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000140)=0xffffffffffffff8b) 17:36:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x79, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3430.433271][T15678] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18}, 0x18) 17:36:04 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x400) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x4000) ioctl$VT_RELDISP(r0, 0x5605) 17:36:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000040)=0xffffffffffffff7b) 17:36:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x5000000) 17:36:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18}, 0x18) 17:36:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7202000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3430.999836][T15815] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18}, 0x18) 17:36:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x7c, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) 17:36:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6000000) 17:36:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x202000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$TCSBRKP(r1, 0x5425, 0x8) 17:36:04 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3431.309026][T15942] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8203000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:05 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x800001, 0x3) 17:36:05 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7000000) 17:36:05 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x10001, 0xa83, 0x78ea, 0x1ff}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3432.020862][T16067] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x220080) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1000, 0x10}, &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x3}, &(0x7f0000000140)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x3, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:05 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x8000000) 17:36:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa01000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0xa, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000000c0)={{0x7, @addr=0x2}, "354428483815f6c8ba353aaf7c6b4b8d2c83f3dfed3e3e8769d69b450ca12c0d", 0x3}) 17:36:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) connect$llc(r1, &(0x7f0000000000), 0x10) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3432.865147][T16213] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f00000056c0)=[{&(0x7f00000000c0)={0x27, 0x0, 0x1, 0x3, 0x3, 0x3, "cebcf315da45ce8500508102c7c228187728c6ac86e3097ddd5d14ec85b1b76e47a674c49c922a18b058f088fcfb3581bdecfda0c0ecc5b346c9833046043f", 0x2c}, 0x60, &(0x7f00000001c0), 0x2, &(0x7f0000000200)={0x28, 0x11b, 0xd44d, "b50ba1f69c863218b883cfcaf18856605e5c"}, 0x28, 0x44094}, {&(0x7f0000000240)={0x27, 0x1, 0x0, 0x3, 0x7f, 0x1, "0369cc97eb931a1c829d9dc7e413faab7bd4fd272797d40fb5574fb82d16f6975ec09b1442424579db81793ea0fab0e4f76ef984e923d4ff9439ef6c1b9e5b", 0x2e}, 0x60, &(0x7f0000000400)=[{&(0x7f00000002c0)="31efede7f6dff39dc0d49c8f6c1ae402a6fee069493058f04581bb380091894180543e470e173aec83f2f56ab1", 0x2d}, {&(0x7f0000000300)="d8d9fdc97c82c6790d835bd2b4843cd4fafcc078e6d90abba595cb9aeffbb215c38d4c841a1b7e3a66e068e0b73a48b9edb0f186adb57bbef7adb977d5ea33f2499717b87a0750ce3268150f904bca0169b1d1c1e29524cf5df6757b354e9d9a53b067c2584b89eb934ae023c5cb57113573192df4be0b77460b709cda1c631567df0a0d6857160f456b9c062c7b44d096709f55728c784cde6f5ea572886d82c608c4c060458fb3c6e237e27c26cfbde183f1679c52b691876ad135581fbfa9067a8f21fd78a61f86", 0xc9}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f0000000440)={0x27, 0x0, 0x1, 0x7, 0xefc3, 0x5f1bf100, "b83442f585515c2976a5a1e5bccaf4a047db3ef7c7330e79e2d3de7c9b9f1808032ea1a4cef9d7fd19f41582b6c8441563ae5159b95bd4c85ba14ecc432be4", 0x1a}, 0x60, &(0x7f0000000540)=[{&(0x7f00000004c0)="41f8a7a254146cb59a556b234bdded4410a6a35dd9906282bc46aa67e45aa543a5c9009fb803661485170f5293ab6ba9d174d36317a04ceef29fb3fadc1e241f9c85d247fbf1c444cb8e216f27f2fe00f54a9048e02cb3afbb381c3b6d1da3b70df55c423e66c5be04cf53b314ed1b04a71fcbce244d0a49", 0x78}], 0x1, &(0x7f0000000580)={0xa0, 0x0, 0xffffffffffff7fff, "6a2062da03122564e259249cafea34b0f090a644489e37ea1bfe838e4a4284e12bdc6ff406b26e29f54189ebc7d850471595a9e5845561e303befaf851cfacfb77876e61d2d66816a052cab338ee2430ff12f65b6cfde5fd713a42d0266923e1da6d274b2609ec06dc0c62a96604eaff3ebd739e5d7bc63b0b98fd9c1c29230aaffcc598162821585302907be5"}, 0xa0, 0x4}, {&(0x7f0000000640)={0x27, 0x1, 0x0, 0x6, 0xfff, 0x3, "849d560f382cd2dfe02f86c450ae3944808004293b59a1aacda4d2d51743caf5b5689a2eff806a063faa78074519c3b1f63b44fa863a86ec3fdf854c31c4ba", 0x23}, 0x60, &(0x7f0000001940), 0x5, &(0x7f00000019c0)={0x30, 0x1ff, 0x9c, "42fb6299710cc6bb665399e062b6e1ed93c32d1475073c0ddb72eb80f0"}, 0x30, 0x4000}, {&(0x7f0000001a00)={0x27, 0x1, 0x0, 0x3, 0xc2, 0x1, "e98e009429c5266eead3da111862ea19b7467cd364d3cfe6dc5ffecf457c5f68240fc8f14e0be2cb8464c47f43574f4e34f1f9bce47d5f0288edd08b3bf668", 0x1}, 0x60, &(0x7f0000002f80)=[{&(0x7f0000001a80)="7a3df1d4d9f0cbef2724f5e5479888edef05aa4210010fd8867daf469c3c68322acad0653267efd1e5dc5327ebfbba4fdea4f81202fe3ba68f9f930c62571f2ce49fe4b0fd7ed2c9dc90be6a2817220cbc559cdb84254468c8809043ac8e1ac8b5af25095320d5f171efae0884e17175b28bf770f05ebd43220420ff1aff30ee5b7ac15186e05e953d152e12699fa2eb9eb7c34269154d86027764eab90a8bf4d96d2f0f54b9664e61b92eb3c3e76732a76ecaf5bf8d741afe0d962f32a7e9a1fd1549d4b805f59366c077dd0965944cabaf25fd68f68a7a391187326274a0b49edd6d1473650eb220404b4dfb9528be4b72e03f130e6a2abe1881a6c96040b6da3c52da93c63d3eb0165dd11ee33afae6b7633b2b7a51b41db85643ca46a240e103d98272df2de15110d2ff1b5de47161d9017cbf8f06d3fa46e14dbab13f892b234e2b19aab373e50bbf1f5868fda7fc499b31018aced17b1fc5d3e8607d8b63fc65fabe2f3d71b38daa7de99c8a2f99efd0c927d423e5db0b6ec9f7c7a4c23e5fa489178efa315c681f5b74d7aff6dbd7e1cd05161d7db0212b7f167a7ea48c889849f1f7d91065c5e7a80da7710f57284fd99ea2daa725d9fc0d2cb5b6eedf452fbd0b117c23aa17e890d78dc48bea25526616b3688f04728733435cff75ae629112912c239ff0404d940dd46020a52161fff6aa5735dea15c49bad18cc11de660d0a3cff708afbb58090a75b23879af1ba49f7c543dd2d9dc833f08b6140cff194e54e3c0ce87828b252aa6a6a010267f38ea97eef6d39f1cb4caa0c2a8f0a53050cbf480ff90dfc44150429f0f156619b74211598bb2190d0a8305ea77e4ee1e7522cd79f6f670050d6c714d6d910d3e76fbcd08c4ee63d346ba51cfb4fa6955023116a508c22e335ac4b21682673771a78753358ad0f07582b294049396c088de4bd8dffa0e6f8c549639863bfa29631d6e3660a290f6099336286f26be7d31a3f973944c96d3e280ee9e2b6979d6b6201bc8549f28cb16038f087b2005ac77d9467549a5a53284f1d2e5489d2d71a5fa27deb32617542a079f99c8398dd430b5b85df8b8ee0d5520302204332fe7dc205d17e9f51546eb8ab1f317af4dc283d3aa9510bafe4ab7e5e9d45462c431fd8244df5df9df0fb4ed9aca5b447e7d3bf29df84a0f361eed1849f35f0e1ad1e4445f361f3e1812858da190f8794c6841ac7d7f4f09a20fea2beebd00d12f48294aef748196ae4cb4cf540eb12e706b90b15529af59d5c162efa49ec2318dfbe6159138eaa04fa47bed0c033c42a6b6628a523bc71a968f0fcdebaf3b00dd32f18a681aa95a19d34374b414c5ea376023224daca7132f3b73f230c15809168f4759771c586f57059cd94892606ac81e5fceaf16f9b00847268bdb3eff56f8e6797def64f3f9c7d0b29b6b518ad525c5bb96f201ef18ebfefc38ae10a82062ddaecf5893041d92ea1a82d6e710e3785fa4e831da3b940cfed7c218767f02d5a02899861324142c857dfb41e94a03c555448eae687e4d3a2da3c2c2fbeb0066df7c319cf52e28b19367a8e9d6b47cf57ba18813563ecffa701b900354c87229670ce129d2bd21e37e932a33a5d20cd149977d2eb04209193972de76faafc155efa37a48441f82f9f1752d8f6746b3d6be4cb20912377a8013e5cb30ab1351a9bf6da49babc67933a39a92d3d52720eefca71457e2109fcb1ee0afe6028157f876d61ef05670967703812d43ff7552736b91786f1d251b9d8b60618c5f15c8a139c5e621e4a0caa17dcad820dfd2951780c5c555cf5e0169532548d4f18c84fe89e32acc52a47f0ff59233611e37679d9480a842ecdf9bf1746b082001508ab92f7fc0b0867a635f230266cb939785ae4c796f0ecfb9c947b17650e08a8677756a4f6b6d618e95a16534435c8a3478d59795348e94ae1d3607b398cbed09e364d29cff9ffc4b5415e5fbcd841a031634ac3ab6763a8dbc6b9a637dff8808963ececbdc5d8ba92118cd260da8d23e2d3f91e14173925456a0e609bf20ee756085bb03abe82951508c06a0875b292560b9ea6ceb24eab569881ece8950d3a7566918469789d979bfec7fee34be9831f1c288272c479fb04557d9f326cc0631034e5a8023b05abd74bf19796c65c8a1bb7e03c31722e9fe365ab04bb5875be0afc8080a2ee0ff2a78d4adc8d95c99dbc4e521ab30d67466d4ba82e8c2f4b9284df6e4edf8c49b5c37a08e4eb49b816b18a819fd2fd6aa3782ab86aedda5caea8f6c28ca69d401c9809af94ce2a16b5fac3d3001426c5c7a7a949e9ee25304aa97568366edc793b241075089897fdcd0824309baced9db915853eca81344031cd9b75c46c1ca9b4fba42e995a566498bcdec835d7a44dcd9e44fbc90e80894d2a50cbbc27e37a1bb05e9088ff295d46b6adc2643160126f84bc0a896a3db249b4ec7c6cb96bde20c98e71c49012e22df78a000967447cbe292f85f5e642e6d5a86e1650270706722a937cc07828d12ba07c29a0c8a36e8d53e87a4e5a917791a4a7beca85fc3e96232d9f4431e8baf7ccfab6f1d6111f09ff596b55caedbdef1d33bbb3f9b87470addd73cb02bc2690b9cb9885c5d15eab6f9c201efda13b1490d526d001f137774d800765fcebd7860010f32ed1f38320333d3bf4220d32eef5d35205bce9410dc896f26d1ff008b6c482bd62ca9daa72ea3b57359a98bd0668ab1c3c96b54543ff07b555373a7db89cb2630cc55918364966bb939762fedc101383ceecadbd3727b4983ffec733d0ca83ca2f05113e6bef10d9da05adf9fb8cf3c7825e3134d7b0e30bb761bbddf3bcffb027d42d04a9e78324b99488936b91e476cdcf300f1edfb601f6c07366d9a9918c3a77603c4bdc390418b277103733fc3c546f5b387386144272b41d23dd9d435e8d7cc4a7852eb50a87d93f13205e5e7f206a63b8aaf8b7584ea1a460ccfb35b62e8863b378d61b7ca637c32f46d5af639ac0db7d35e75133b6d55a2b46dc8111685220812adcf884b2be72a9d27280a1a60cd1e63abd7e09b999fbaaff2d47ee0513142fbe5970c57e9c5b829d8622c18cef14436decf310327f52bf7e90ea3aef2a0158bd6ea772a33f93e916af5f3f09aa0565a03fe90b79bdbe18f99fe313a7e5b27564d061ae76553f11ed4632ca38fb8e5c527c64296272036b021fbd8f647ffbea4a6cefbd9cfba1fdab8f22c41c347dd1f05e161c7f1ff911504a5a1a4e620cfdad53cb7f007749b0912a754da41de18bfcaa7cb1f3321fcdc6d4f6606db481cacd2f90adbca07666d8ba09a017e94af56103a089aaaacb5d1aba6e57d674e721d1ca8ead3e91988a093b0195ed358ed5de0c42ebe4df08eedfb2ff403c4e2f68c11e51af8e485cebcffe8b4b975480b6b4487c3cc6ab696a76cd398287b71bebd59418d3d49747dab832d90bd7cd9784dd9bcd4bc83ac2fc4c591eb8975e4dbfb30a0d021dd3aa674043b7ca4cd05178a63d760d6f9f1719e937a27e10fd2d3598ed6bed2d76f09d1ecce1f8d08136c03dfbd2debe766de5d66ff39584d695f1469dc3a9b40b2f19c3ad2bea1619b53fd9522244e4c7695a8a5de23f99654ca42b6709b9b3e21ec52163ce2906fc2f442561fbfb7dd7bb2a8b24f49442c54c5d6b1d7446c7913c0b4acaac88be9ee9597bb03b480f688e6a13d86a218444fdf4dcf4286a1e233e26ff0f212c270673f60187cc757da1f87223aac74c0d4d61dab207005b9e6bff3012dbff53af878692fee560d463ab7c2a79035d18b86bfc05e569530415f5ce99b8c54c59fceb6fc6e49cec6785890814d5ede907844b71006ae91873738b6a09d1ebbcb97972db7397143dc3e7680ef133d155102c7d617c559ec238cbd248e99c79e9488af2e357e316f725771921efca66aaf71be4b0e519beb1517b1a08fb7c093180849919f3de39bdf62906ba9daabde81b04277272ae80c4c57488a08009e99cebd99edafcd41462736761fb08651487660eb961841487007250bce99860bdef3d9fc121aec9df36e6c8cafc4e1b084a00f8ba7933c66b6dc843a16639e946ac8665f216fe42f310a77a17449e6149296f8e34042149cd06dcfcb75299aca8e87b59fec96e752ec8f39dae29c615193c5d08314253c28f931d84da0254e482b3650203516d1985f2fdaee152d944272d12ded41d4181634a2af91e03115fd773d64d13215f0cadc4fd528c7a49ccc13bf8f798dbac81f8b3cc0c3453deffcf1cfc74bd2415c4d1db88d4353cbfb6c5fc610fa6dec8ec0bfacbcccef3ea12937282b4a3798e70e6fa898c3e1655449ab1c8eec248dcfdeb4bdbd9d37e0ae1528824fb659028a0149e24648b9299c7ac57ade906c473da4ff19ffa57ff09c5470d57e735899f8ff765cee8be92c0086453740425c2684c9d88eae1e7d4cfeb46f2602abdea5285e8a0529fad0be087db7635ebb2a642655cacc48998ec75f23f62205bbd78398335c874a4a7e1ddbe913d3b30a64c347bf9758094d9a97480b1a1faebf18ace040dd7a2861334163d5eb437a9f0083e5141e01120ed0841e86543542942ca1ed95de8b7ccf18026bc17238123befdd3661d09636951cc9d15bc24eb708e3bca91e2cd2767886edcd24ce7d56860b3198f27d5f18ea2cef584f32fe95c7f6dc365d8737044c4d3c9c80baaf6de35a3d467896a6e04f647e84101542b3bba35efe13baf3343d8c4a1dc4672a4925ce1e5b7725d5a06ad752f03a0e4d290dc6eb79ad17578b92c47b960704e294c982a935e3148d0d8f1aa1ec939f4d81d2e2990a20a83a1f1ac858f7dc3520687ad2098d34aae24db403d05ca14c75fd4b6af8a56c7c004268491418a799570e9cd318cc083b819219e40429baddecd0c62450613a2d03e5b8117c48ccac2aaa56535412971d61b43ec4d2d6cd9d51a39c0fe5b2161e96a28657b799b01d4d1883d7413dbd02ad57f2f9b3cdf94827d7ffd1d73022f10a7119317d1b652092d1cc2d20e4a24f051f169dd536f95b1e9e8b9dddc9f721584d2e17c131cb205fecd79b0ef26aff37c9e57e633a14be1e819ff84b0823c86bcea8f3004b97cfa5bc41756c7d8a4f7bb6797a7c470f932e751c662b6b7930b318f336d3bf4f011f4897f955ab3859d3237ad066a5cd302f2ccc626ab7a48bad51eef46eeb97af2d3aa65fb278bedd66d756fa776e205f85d7c17c5d0bd717f12b07dd9f4b221c2a056992a89da5867ca6c259e669897d18cb6636cb174264290d7c45e48b6ef11d2f2ceca91939c9dc2263051030b7f3aed589fc7bb29c9c465b85fccd4f8d31fc0cce01353a7de3672f314db7db90d32308ef066f759a444df8d510d49ce0cdfc313bc31896c77bfa580cb079893585cf52ea780d60c11c7866535800ab213dd6be9e0f82f1e8f834661eb23648860063f4187888a4d1f57c07e2e8e925ac4cd059707d2fadd9baff00ea72c55c0de687ada0fd1e8aaa5cc6f33d6748a0158ceab5814dfe1de9d9489d45e38f22f14e97e63e732fb233705e2071b66de6607d9d12870aa8e34d4a6cfcb56d787f00da63e9de045ec532b112a464a0173bd54aa8aaa5e0d8d430acb75c0259cdda5a704538cb550b55b4fc110e6b3eefee6d6c11e24d106baf2cd072b8271d31772abb73f011c6f6c9c274e8f6ebbbfdec66d85b29a79389b05d7eeafa5e55596f9b022e4777c6a7a2b77d26d07945665f75e8e2bfdc08d278b01cd766dcda398f7acd9dc2568b2552c4ca60b36a88f946355f", 0x1000}, {&(0x7f0000002a80)="3f8aa47d23d1b62b262ece4873e172cd84c299107f9bbabed64ce665d319e6cb59b646a67e4d6f0095b5e36ed324d02a47ad519ee42b1832688d2b7da0b853dac0e2c1dab07cdd90129d42fc342b76525e17f63f412677b506155a43513a6e824d669ab26a39439ed5f181a47eff3d0bd312ccabb91815f0b6b8104ea596a45f4a82e915ad688c1ee0e827cf04c0c510d14c5105e3c5ab92d5191ddc79b8dc31200144af8720", 0xa6}, {&(0x7f0000002b40)="e4bd1e9d98dd44b7c80f3bd92161ad9608c92758f61950c33eb5a7284b3ef062291d4bebaf1da5059e60c74faaf1d7fea17b8bc60798da20644c283324e8295faff0dc8db349f6a82015dcda2953acc065a78198fccaaeffa55e1ba0ecc4b87ab9b139e434b92221f22741c47e56b3f875bcff4580af7303be3f7c77aecc0875b1ddba89dc08ed3bcf508af4762280d53295b06a055f9343de75cd983d38c9abf1c2b04df3a3cce821a4dd5317d03691bdbf7fd2f2ca85d54f00ee73a8452aeb4e9b5ba74653e60bf137902f711b2c87fa", 0xd1}, {&(0x7f0000002c40)="d870ba3a80ec86abba0387b613c5f7d65336a27ed52d46dba1a6f36781feb4baba41120fee362a4e810b8e22f80b6b7360f65061d334b40da891434bb8443bbcb020e7ed9a1659a7d6d7ce251509a38b41d51dae897167b9ccb0df089eff67f49655fe7dd9cf0d7eabac4ba5d8fbebd1fed3ede675", 0x75}, {&(0x7f0000002cc0)="419027194e1c5cee70005961574ce54f935071de388f63f4880d90a5c967d30496d87fb5672089950ddc4dacd150a62bbeddac0c6711bf2d8cf8", 0x3a}, {&(0x7f0000002d00)="75bda24827126fd426c59c49b911bfb37f6c615a52fdb964ac624e2d5bebb896a23f2e4ca7c1c2f22622e07499e2578c9ec7af0942f6645f06336045bf4e476f607f892e661c76d2b46e748d11ad9d5197b6dd9e71b0e16b6871f24503b7688c1ed1b2c3ec6b14e19065af2a2df7853fb0ddc2b931b991a97d32df300ca02a052e7751c53611a37d3c5ca6e2e243b6fc859eed51466634cd5dc23bf9bbf3faba46cf72bdc7", 0xa5}, {&(0x7f0000002dc0)="64ae3930a01fa0989f1fd045eb90c72f6e0427b9a6264acfdfb3d32a3e8264c2b474a3ae30f3ee2a24a06ac620610bd66dbaf5cbb5b8", 0x36}, {&(0x7f0000002e00)="2607b040e779a760e85a0dd8d1cf5a70901e42873aa9d2b30c38b3b3e1eb0d999f501c96dc4d88f2d8c7c56718da67cea9e18b7187c15fb1b478e63f6132d5905a95b507136261e6445f18dc5b9017b2432cf204217b732c0a569996bad57fcd634605bc3a6b215e4bb310b9c30d86ecd82e5536dbcd548c3e4b7d7a4c7ceddc8b2c001f46e2771bd27651d94696dd59b70e", 0x92}, {&(0x7f0000002ec0)="5cd791dd5952f615182a1d03f492efc37750284f24a9b5e2f02bf3a12096ef21603ed8e3a2f9c9ee34ed8cb510087dce61d29bd29babb3f673e740f18a75447da04c2d3a0170d21ef5cdde7bc076395312c6e328be69ccb61581fa2d34deb8607b6f2e28d49afe92c723de3249fc096c1a4f12296a15b3a25338ca3afcde7f66fc834aeb292f2b875b41c22a5dcf2190d9a93aa7a28db1", 0x97}], 0x9, 0x0, 0x0, 0x10}, {&(0x7f0000003040)={0x27, 0x1, 0x0, 0x5, 0x6, 0x200, "e54cf2c5dacd6ca98125f8eab6d90472ba899bfcc21833e7438c2525f82124b2c9a17de18cd8ac86d46883438e205667a6b0f41a2987048f3a00fc5a3ee67f", 0x25}, 0x60, &(0x7f0000005540)=[{&(0x7f00000030c0)="b5ac4f", 0x3}, {&(0x7f0000003100)="7252f2354ea2b6f2cc0d378954227e838994e4f8fc5250aa7dcf86b366f314ad4d71b4a6663fcca4695382b95f39c9438e189e631b8392b8f3b476e1595f31b2dc642f67585ea6aba034f230cafc8ff8c358cb09f7bb43f94bf26af05cddb7ccd50ab7deb58e4cc2cc838f623e3977124d222609ae5c99083cf7c36c069c6131841bca4fcb1ffa609270495fe9bf47ad616149b3fc009a6eee42897fcbfe68bd1872078ea278b2941bce0bd3be614398b16bda3262124ca5c2902ecda08cacda1fe8a63e79dc968909f8613f1b8c3ca83575cb15d35025c47515b80000529455a85140c4613b372c251a91de290561a9930fc765c1109056f0", 0xf9}, {&(0x7f0000003200)="5f3a91d43983dc2ecda98f7b497907d727c2b68d500ce9ac0acd701a38d2ca71f47581ca37994ea805833e28d9d3066280ba7f53f9cbec0123541c58d06973c89cd6559cb9e0f2e5f9f9dc49c6de410e3d30f10f0b2e5a457f827baa9f3323b5a71a25df1d6d0dadf922afe419e2e28b509bb69a6fced3a512a21a01d2d5015ec410d54aaef9d51c7d959d8b92b23c410c52c9", 0x93}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f00000042c0)="2127747b380389eaa1572fd5109a1fa4149f6e4488840c14f47d90a745620ad450dc240768a38201475493a9a6a81bf8373deed04b5d42b14a10e96c0c38565fbe39000426a75f6edb470917ae8d62e4c397b7507264a66beff405de85", 0x5d}, {&(0x7f0000004340)="a607355118f627545806764b6a6b3b8a9bfe2835536a724fbdb7eab1de07cbe00c39027ec0b8ee95fdc8978cf64195938e7c00d54c578664f36f4c6bc51afc6bc31b60948695d2a2840907beca1731144339e648c05b8a40f6efcb246c8fa694f17b2b0cce56258b72ed340a0c36a047594e3a758104a8221ec2735704f454ee20bb435cf7eb07dc70151fb0f842677f75b367f5d7745b31c6be99ed7244b3bcabc7a85f637d0d2da391f808b419ac1c8a757b2e8d9e2731", 0xb8}, {&(0x7f0000004400)}, {&(0x7f0000004440)="a6dbece1a203811d2667ab9dc8fc61840f1712d310ea2ffda98860fd65d1074387c31b49825209af7ca43815c2da9fd09dbd1ef216e329a1031696ed0cdaaff060984030904681c473e45f55bb55e5c12386e71c79f09fca99f873e9188de483786b2bbab603e457548303baba1cde5882c90276e45b5b385aaf7f5a3fd830abb59cb0b4c05603be32216e933a4e5e10cd99b294108349a930f73dbcc8171dcd451c6bc2f882e9d250a3217517ea118bc45e5bdb9380b55e5539d24b43b7e677ab2ea02459c68312a6cad13594a417cf8d09cd4fd8efc3c4a77bdab8c98db0e535f14c8e9e48242f51af61c319142139fb51bbde8042c0a861", 0xf9}, {&(0x7f0000004540)="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", 0x1000}], 0x100000000000035a, &(0x7f00000006c0)=ANY=[@ANYBLOB="a0000000000000000e010000000000001910730120fc9b8e756fdf0624887a0765646c1fd5b207e28afac78c1dda2c971e5407715362b709ff05d2fe6d8507f7d322248344e8c976fe2cfeb476196591266e219cd5f8a7605c2c17e494209325dd73b12f4f843c03f9ed21e6e29d4858daf82b79f478edbbf776307a71dfd95e939c7212bc8496294f3f96193c726e677f05142e89990ab4ea00000000000000cde0cdc9b9217da1f12cc9201442d9ca3f5d51079abe2bdea7f87936ceb46ca737000000"], 0xa0, 0x20048814}], 0x6, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x10, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xa000000) 17:36:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) [ 3433.159659][T16340] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:07 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb402000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:07 executing program 5: memfd_create(&(0x7f0000000000)='wlan1\x00', 0x2) r0 = syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x8000, 0x4000) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) prctl$PR_SET_DUMPABLE(0x4, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2800, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000800)=0x80000000, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x3, 0x410, [0x20000100, 0x0, 0x0, 0x20000350, 0x200004e0], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x10, 0x20d, 'syzkaller0\x00', 'ip_vti0\x00', 'bcsh0\x00', 'bond0\x00', @dev={[], 0x15}, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xd0, 0x108, 0x140, [@pkttype={'pkttype\x00', 0x8, {{0x6, 0x1}}}, @m802_3={'802_3\x00', 0x8, {{0xe0, 0x1, 0x7, 0x7}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {{{0x3, 0x41, 0xed7f, 'nlmon0\x00', 'eql\x00', 'rose0\x00', 'teql0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff], @random="916824b160f0", [0xff, 0x0, 0x0, 0xff], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x24}, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@random="e7a9ef27744b", 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x3, 0xc, 0x8864, 'lo\x00', 'irlan0\x00', 'veth0\x00', 'ifb0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xa0, 0x128, 0x160, [@cpu={'cpu\x00', 0x8, {{0x5}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0x10}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x100000001, 0x100000000}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x16}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x488) get_thread_area(&(0x7f0000000680)={0x5, 0xffffffffffffffff, 0x400, 0x9, 0xffffffff, 0x8000, 0x7, 0x3, 0x100000000, 0x8}) 17:36:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2, @multicast2}], 0x10) close(r2) close(r1) 17:36:07 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xe000000) 17:36:07 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3433.809591][T16461] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)=0x3c7) r1 = socket$caif_stream(0x25, 0x1, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x50000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @dev}, &(0x7f00000001c0)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={r3, @local, @remote}, 0xc) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x40, 0x100}, 0x2}}, 0x18) connect$caif(r1, &(0x7f0000000000), 0x18) 17:36:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xe0, @multicast2}], 0x10) close(r2) close(r1) 17:36:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf000000) 17:36:07 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3434.044689][T16583] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0xaed9}, &(0x7f00000001c0)=0x8) 17:36:07 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2000, @multicast2}], 0x10) close(r2) close(r1) 17:36:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe00000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xd9, 0x22000) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x1, {0x3}}, 0x18) 17:36:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x10000000) 17:36:08 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x3f00, @multicast2}], 0x10) close(r2) close(r1) 17:36:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:08 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x200f1526, 0xffffffffffffffff}, &(0x7f00000000c0)={0x386, 0x8, 0x1ff, 0x0, 0x67fe, 0x10001}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101080, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) [ 3434.739536][T16713] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xe0ff, @multicast2}], 0x10) close(r2) close(r1) 17:36:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x20000000) 17:36:08 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3435.034075][T16835] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd203000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000018c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000001900), &(0x7f0000001940)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:09 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x48000000) 17:36:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xff0f, @multicast2}], 0x10) close(r2) close(r1) 17:36:09 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:09 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) [ 3435.624502][T16954] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:09 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xffe0, @multicast2}], 0x10) close(r2) close(r1) 17:36:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pwrite64(r0, &(0x7f00000000c0)="4db6ceb4d4db69f529647f03bdc4b8d8aaebfb1037371b13c3037cf0c6c1c0c35b07ef2f1b681f399eb50cc802a0f5ca3e7b6719c258d9d76a99c7cf0f1e4b509dff0827a5149f7ec3b2c2682e755f11a623879edbe4fc4d6b7c271cfedb1c705894e0f2f104c48f0f42fa4ef316f3d370bf7f3b1eb9037c61d80a5f7b989fd893314729305b1cef0e38ce290d2f0bc9a85c6925170eb327a34037e14d80c0ab876521dd9280e795f068061ebdeb7512e19720ce602f2521b9c98b8605e2317f65bb7f1755c179df6be0a0fbe2e358a8eb8e3d69", 0xd4, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4c000000) [ 3435.940464][T17082] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) accept$alg(r1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:09 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x1000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd402000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x50000000) 17:36:09 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x301, 0x70bd2d, 0x25dfdbfc, {{'sha3-512-generic\x00'}, [], [], 0x0, 0x2400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x40010) 17:36:10 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3436.495478][T17196] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x60000000) 17:36:10 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:36:10 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x80000) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x10000000000009, 0x7fff}, 'port1\x00', 0x40, 0x0, 0x8ab, 0x2000, 0x7, 0x1, 0x3ff, 0x0, 0x2, 0x7}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r2, 0x4) [ 3436.785967][T17323] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:10 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x20000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe202000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:10 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fstat(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x80a, 0x7ff) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000002400)={0x3, 0xff, 0x0, 0x1, 0x3, 0xb4, 0x2, 0x7fffffff, 0x0}, &(0x7f0000002440)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000002900)={r3, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, 0x9}}, 0x40, 0x3f, 0xffffffff, 0x3ff}, &(0x7f0000002480)=0x98) r4 = fcntl$dupfd(r0, 0x406, r0) getsockname$netrom(r4, &(0x7f00000027c0)={{0x3, @rose}, [@null, @bcast, @netrom, @remote, @default, @null, @bcast, @null]}, &(0x7f00000012c0)=0x48) r5 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002540)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000002640)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x7, &(0x7f0000002840)=[{&(0x7f0000000180)="3c70edb04ac69ec78a8c98a130cef31893b500f6ffae586a10cf9d55fb033bfc21df4ccdd8d7328a2e9f238781f33f", 0x2f, 0x85}, {&(0x7f00000001c0)="8ade9c3ea325dd394fa5e0002a015eb456416a27cee00366e27516c051f112521e9e69dbf375b6c2d77ccecf0cf29f0f3d357c91ea48976f8e4dc47f", 0x3c, 0xa4b}, {&(0x7f0000000200)="514f60c84917c507c82cd8a5a40f9a38387958268cb58a0110bfb8ef8457da9814f504967a3545e1032c675cf68eca1b73664a3d529b28de98f49f95d61ca52579fcf9bd6b3baa96a53bed182ed64d0846fa0a0350ec7c31c2d2bcac45ca46bf1b7d5e620640bbbb3338bd9ad8162945bc464296c61c2f1463c6a589cc59d93508ed83e7e00d30a372d8cf66861547b7823e479231678fb5a63ec36d6ff04a1c5c31823f0447bc408b68c304", 0xac}, {&(0x7f00000002c0)="afa5c00273fd5d5627e33f2eab1fab7cd0842974a6a587ab900b77f97c484cdd23ffa1a318ee7e587954902fcb951e59ce66854a442418668cb99558c03bd57b6b439e950e1e3df2d926676f29abacb3c4262e0d8c21be47d0708c9043bd2d55793f715d28a47b5f5d9f375c3266d9b4af8254635d1cf164db0a4e22a05f5a8db78ea9d2d82e72e83883e31e4a7aa6c2a9ca9b4c3e07abbc5d9644f38d6c7fed38ab08690f9f3bc2b062c90fbe38c87220108e4a798182e0b47438bcb425d613975b7cc6c00592522ff49bf5af9d0894192e95712a650687ce5b811456f3a79fbb1515d961310f6d06dbfb2afa985533171f54f19348455583ea85b05e55a8290fd41b3abc1dd8bf1982463d8b40156f1549c9bbc3fac93e3bee37b0fc5fa75c64de6ed2c1ef052b8f585d3eb8ac84bccad4496741e0790af01b855f23e328d459c46634a3ae34e804e2b59993bd5db4c7381b76c7994cdd1561a85aae7c021101085f947fc9ab9ce40f13b26e7d0dd2357a6a72bbddfabcca846d185f99494eca70d34676af3a8fcdb6fdc3d96236d65b879a9c71e76ba765c96d2cb5b909f386299283b361f8c1231060f145dccc483650700f323c78e167bffc02483891eefed59b905a383a72650b4ed1d1aa296c8dcca05dcaed6cef49bdbeb66916e745e6b556730a1f049c5eeb01a68e53ed640bf7c0ac7e9d1f279cdd280371f4a25884039b86b36604f19b4e3145ccdbb30a304f8fd76ef4da73972fab8cf9d183ab353179dd1f899f530a95c76db9e9e38e3d710f124599be6cb2a49f14c0f7f316ed3264ff0d80a4e679e166a1bc546568d8a180a6c00c713971ea4991abbd9e0d59883a8e7324ef74c15490537a59f9d2952b7c053907753ca85b088ffaba5a31d2d61d83603a3674115ab439ad7ef317b550bb186a8f15c749630fbeffaedda11afa1ca8baafd945cecc3997d7616dce1ab5371ea471a9c832b0a1a4ae72314687a7ae98b4ad9cd5809e1c2f6922ec40715338f8ac4c9c167cb42eee302b37e1fa379e798b3cd6a4722cdc09310fd991108101957ab6db6132a3df8e120d40260f1461d04cba5fd08a66ede73c3966c269134e14073647b866d30ae56aa3ee4b65ac1650dd0047096732255a2a02659cdacba3a44226116eaf8ca91d6061899ea4534b70445407c547adcf9aad152b0b354223f84752d527d0ff92c4f6647d753cf4dc3dc398cb8bbbb727d4d2c02db4562344fd893d632b62f9058cb321b65db104fd3ef53e3304940599c13c7e7625051b3e5f64da44279096b9d71dd6534cdc1b845fc79f781aaafffda27c5d63a5d93570e441078ceea67627e714d9736ed67949b6e84f0e8dd745630f22bc4567c0f21a6a76ae696759eeb77cc9b271b7b14599afa7e6dc6acd7a7807516602936895d31060f7e33b6ee05892c23a035fbaa204b5f67278ff729394256bdf5676768023930dc49bc68f8668361fcd28659804a3a94d42a8acc4b4a4dc90930f7c18060ae03e4aef91c726e98f7112484b51313eaec347c26f5ab03338714ec695956400c90d637ba3a270b0408e506eb00fd0c8d65e4c44707501445fa0aa6eadc5cccb4a329e0c63ba674421a5556b62e6d000638729906ec02966bf7696b0f4cec01642d7b4abe5a8341a5ab8309464576a1b4bdf08c0be08f638752b833f2bed5cc2446b39d9e904f390a8601a6abd2d14c4e409317b4d4336caa1410dab089a537f82be5d8cb6e9dfd55dc97ded173ede757ba4ac237bc10e2764fbbcca26076d5d043ebdad25cedc3878b62f081c8d853d8ebf3a3db108a7772ff330091d15f2c1a8279f3baab0133743989d26de1e2518d740a99a1c65acb6d1580c0e99b8d1fd50f5ea592560f2a3d508c8740ab4b680961d14ef62bda32f1a9f4aa458cc53c6b9649fa9f5133a3e4545b174d6a9f6354c846d3306099057ec7af513d7c35ee5d00ca605aa4480e7af028ff5d459dc1ca84b7aa77395e0c26e230bf2452d8974438998973ffa6a47c720ff35544819305b97de79f29378cec86fe43bcaa67b62639eb52f91be9bba2fd9a8f87c1fc99a85dd37c494a02cc763688dcfc1e071114d226c5cde4649c27ec2f86a5c0c979174c1f16120bc83a112dc40a3f2337c3dd955e9d3b3127be5453b4e08a6428ccc24a3b6d75724cc7fb4d519d4e152fe697f954c29e3282f8f8b09679ee0965ea8aaf8352c13f013235affde04e7d0398f8f86aa11f40a1c288083c9c3bfde5280a436d155269fd9faf53c0a5cdc9f87c7e18d00505d431635f255a3aa5ffbd109bc2cdd9e1b88a75faa259c28eb56cc8942111f33c38d71c677baa25aabdb66073212b552ca5fe95d7842120b0ddb64bd5af23b0b6e9a7f7033806c5644766c38378b4c08f2f02da2b815e694cbb948e33ebe13821c6343b85d18dd944b9a6e52c1b0e226a59303fa5ad94856bd48eb14cc23e99a7ffce54d6db8d4f0b591e1d59976b3da1d07ad08381573ed381d23da69286cd70a55d6dd594271a4fb5d4fc81de116a7dca94af011c87a79f60304d0385e7c9fdb4bb575e0cf40d701f616e372b0119a6d1af3d0d099b470383315e0670884ec16f3c671ecd7ecf642c545b4343ba925d3023281233c4df0cb2c3c56be62e4f72303d751b1244427e961dd16871bcab25805ba4629225fc0bf51bd79305c68874f2fc0ebf8474b7a47106fa4caecac3b997043431e84c83c137cd8b7fc1d6bdab3bd03be6540b71cc0c45bfada6fe29ec912c9990f7e25c523973d269dd734411b2c2f73e86a8abc3dc1ef9567acf2198bacbb3032522bb457a9803e5e67b58d6a267ab2fde9ce1daf9964945f46cb5d3060be537179ab1a1e3f06245e310ef3d4874f7429384ac735524e7e7248a25f6a82239e4c3d7e3b4a76bfb266d311a76677647acab9c0f699c09d8aae6f221140081318de6d9e01b773076405df0defe0b6dd7193c903117dd0c58aa2586aa5a89994d84d2d7bdf2abf031f0a1d0e5c384ee877bc7245f33257f960fa74393c1cf0828c26cbf92679e8cb5dabd444aedb8794464f90c13f571ef9677265897b7762521aead64b324a80a0fe2a74fda046b598c4c6e748871a66fc7dedcd7292798cb8f9fb709c94bc488c3c87dabf3fe1df47bbefb32884c0f4a1f9537a754fcac38cd998849375130a4b31a786e0b6a6fd7233ebd5add690beb0b25113ba80ed5483f2f40ff5dcf81456bf879b523af7afd0f1d4ddd0ef918b773eb0ab3a00e3022a088a10cd15817d358c3d85cabec2ae3b80b72ad2c9d5b9c8816249f9b73a6972be53130f7e3f85d56aae970aa10d255581d1b25e53939848a0dbb9ba2af78ebf158606b63c2ea0ab2fb30e3074fa7f76ed1abed1763c7987200020c5ea05833ff93f37ec3cf6362831bf77141587d165625b67a2fb1c90cc3e0ebc6eb2c8ce5865e00400fa736dff616ff7519f6e3ed33ef2d7cc8ef89035d439d49ad0a27837bc0014d713b456bdbadfd2c5969551de691d3f9786f69a5e1358528d17459c2671de4e73e8d57d6ed156bb02c47f8aaf8420e4ffda8682af161d53c27926ea4090b7b311c1526975adcfbcee6e3df013e933ac2cb6a0540e312e69391b4cc049e06ff9a2f387ceb11415e4ed562d1275137214cc0ad770139c38309e566a7edf6ed3e2de297355f727e818d764ddb51b6fa82230bf17a31a34b07af53b02cc79c7fa7ccd7c9399bda7d2e9ac8eb24602e84ed1ceeb8e7d1f1d77556d9af71d1ec32b98f91cecfc2beef412c82b6269fd0ab2002e86fc94c1d7a1e188551d9bea43d0fa685a6e24f5d11d1bac4e68a53feb2ee3157dcb38f8a1b9d99cfa390216216c6db6f64efbaf40f24730d21f8af0f42e46080a6badb7b72f190fe18617dd05341766116fc1f809e79d01689edae375029f8dcb06cfe5e137df367a27d1a59a5b6c174a5b2680d98a1bf3082fbfae0778ff3a2b274fe7637b424e67fbf5e90e59d040e8fe2c91960ceda91afb947c3893987d63e828c8048f8b34b71ab9ec0e98068adf1523a2ba2318e74554dcb1ca4380b96fe82408483ba398c4b961a8107e9efe29d36e63a1d003b4ecead2be4da4ca6b5e070ad86d520dea8f91dd4e8df81be75069c4095da342133049339ed5edfd62cfd5b57d8e38edc90295d428501dc27e6d0bd1fe6f6fac83967a731cbbf52e4efcf3b7c5d08ad746a3dd28bbc6f2e520441e7767abafe94e9679aff030e03de4f370d51cb061b73236555e83302c1a82ff4094df762e442f97b3eb7a386cd71282a13bff06c6564fca36f740c379029a0039053054d8897fa4b8fb10987127fb10da91fabaae24ec9681667baf1c5013ef82e40ac73540d8e4b8d95f074ef05737835d40e9e89905eeb621065a87078053e157fa1ec09150b341c93e0cf297e11062c439c00ee6920d2f946d687d55420cd95dd1d8052911d6b4cc4bdbbcaa549f7ee29f920b091e01ad34b32d4647bef32cb91eed523f6318a206f0c1a2c526bfc07d61428e42987eae29a271b8cc27d525cddc66a70f52a7b8b043d1724e8296112506afe964e78562f33a1638c3abe196b15e97ba3766f9eadf100a97c0d0afc13e95df001d8446b498721cc8d95ad1ef9cc410c329e394a0536936305aa07f93026b8158b7994d329d2f4b33d53281a6970d1d2272a5b86f76e26ea78f80653931a7ea2e7483b8a7ce1d7c05281e490b8ad1ec02dff70b20725aaaf5255a7f9d3a9c3ae145215efc95de941fb402c6f87b662887e901a4c9999708fa15d28722c63831fef60b7784e76399790ae13c36e39ec4db01efc1cddd9ce668b881695bc0c04c1a54900ccc9edaa4acfd9353cb1078ab80b42319962a6d46c6c4aba71bf5bead7886f77dd18e1488c72ca53be26338855b7587ec5b60f3e5f2713c0ff92e15180940d30b0960c0c26f7178560575c7d6b29e50d2582041dfe1a421b3eb6e1fb1a5a5c6f7d6386d09257f113a74cb9b3821144ece79526d601a2aa930866c2afcfe8c2c7868c8a386f9afc8ac519271da2edb4d14c04e59257a81d125396b6798f5681682e02b3cd553c7d49fdca1dc57d47c0bfd6897fefdbaea1b8f1f283b32a434154d6aa4a286c578249b137db1ca7e10dcd54a76ce4a6b3236a302f8812d7ed6b3389b095c110b95160b8d521b10bb7e9bc473947fd4c1751abcce319d4ce9c8987128488cb9367ba8034e6588f68df33849e52ba62895033417b00cf9604585a3da3a9c85f44e47178cfe16137e3fc83938460f9b0720a83d07001c23466bee83b681c8c9713a357d156dca061b411b1688d7543c7d6dc410f738a507d2e0d09ffe060b4e88279f974e6c0a5b71f108bd69fec6fa0fcf4b3ed2b7d50e2a7aba92fdf71cc4262c4100cefd63d3d10b5034e429ac9a16d57c45dad158415b3f1561b007fa6592e8256267d6970322cf5c610061f136d496247796de7181dd7458c3bf96dbb3c7d614bb0b2be439fe5c88c8b5a0d3dbd3e166f8b89d7ffe0a81185d0e7279c2011f9db3dd3a0f16a3a0238e23ae7e7804a08cfa503c343c49843f364292901185fde0bf2647a01e9f2be0d4b8e382f382de90fa453eea9f693bae5234dec4bfc5dd97ca2d921734804a47296c74d1a47f0921cf3a53374712754a40be20aaa9151202e573eb9ee0ff485baf50931eaf312abb9ed8d62d17216fd228e326b2f8e87b0017dc07b050878603ea35287452154cd246b3432ab8d4f8e8868ff7134fc13c74872135ef5a6a9f01a7ed5deb01b7976951f9fc", 0x1000, 0x5}, {&(0x7f00000012c0), 0x0, 0x3}, {&(0x7f0000001300)="4a50982ff4f990e8b9d049da463609d84ed6f549a8c796543838cffb5b53a75eeb627aaaa2f1c3273c12033bcef27f45417755e0388b8801317e445ad482aa12494b0f5a2de6cf2c1e5dcc9f3c83f1c3ec48a2a80b0cb6a56e4fea53cccb752bd7f1198b11c6903d9eda918ecb6f186fde4e83d3c3d3412e3e5d8609b9fa032c0ec2f0b51e7918849dabad0e2bf7133bcc261444b357fe7fc476d1e3af15202c5c8c6f470390100fb4539f7e6a8a2cbfb3a588ebc9c7e0ccd89920d8e5add2bfed3e5e24a415a81b0e0eccdb8eecaf17c7e801", 0xd3, 0x1ff}, {&(0x7f0000001400)="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", 0x1000, 0x81}], 0x800000, &(0x7f0000002680)={[{@show_sys_files_yes='show_sys_files=yes'}, {@gid={'gid', 0x3d, r1}}, {@umask={'umask', 0x3d, 0x1}}, {@errors_recover='errors=recover'}, {@disable_sparse_yes='disable_sparse=yes'}, {@gid={'gid', 0x3d, r5}}, {@show_sys_files_yes='show_sys_files=yes'}, {@case_sensitive_no='case_sensitive=no'}, {@errors_remount='errors=remount-ro'}], [{@seclabel='seclabel'}, {@euid_eq={'euid', 0x3d, r6}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@audit='audit'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, 'keyringppp0vmnet1'}}]}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000000c0)) setxattr$trusted_overlay_redirect(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)='trusted.overlay.redirect\x00', &(0x7f0000002a40)='./file0\x00', 0x8, 0x1) 17:36:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x68000000) 17:36:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x3f000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:11 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3437.517710][T17453] ntfs: (device loop5): parse_options(): Unrecognized mount option seclabel. [ 3437.529453][T17453] ntfs: (device loop5): parse_options(): Unrecognized mount option euid. [ 3437.538771][T17453] ntfs: (device loop5): parse_options(): Unrecognized mount option func. 17:36:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xe0ffffff, @multicast2}], 0x10) close(r2) close(r1) 17:36:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6c000000) [ 3437.617847][T17475] ntfs: (device loop5): parse_options(): Unrecognized mount option seclabel. [ 3437.650924][T17475] ntfs: (device loop5): parse_options(): Unrecognized mount option euid. 17:36:11 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3437.693397][T17475] ntfs: (device loop5): parse_options(): Unrecognized mount option func. 17:36:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) timer_create(0x5, &(0x7f0000000040)={0x0, 0x31, 0x2, @thr={&(0x7f0000000000)="f4bf1a664e719f423ebf891b3df0e5a120859ea00b9b12963c9ddfc36f10cc95aa79", &(0x7f00000000c0)="a617d02f133621cb2d3801e69dbf226f1d7939868e1c8bc94e62c702c7c470f88a9713ac9d2942b281f68f5a1f1264b43475c21d896e6ba3320e08be0769925976f7fb6fc56b7004e7fbd71cb45ab527866b6e91a0dd7cf73e6726f13c42c027c64a2492af74a0d35d"}}, &(0x7f0000000140)=0x0) timer_gettime(r1, &(0x7f0000000180)) 17:36:11 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xff0f0000, @multicast2}], 0x10) close(r2) close(r1) 17:36:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x74000000) 17:36:11 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:11 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x100) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x1, &(0x7f00000000c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000140)=0x3a5) 17:36:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:11 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:12 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x10000001, 0x3) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r4 = geteuid() setuid(r4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) write$P9_RREMOVE(r0, 0x0, 0xffffffffffffff65) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) [ 3438.459237][T17704] net_ratelimit: 2 callbacks suppressed [ 3438.459247][T17704] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xffffffe0, @multicast2}], 0x10) close(r2) close(r1) 17:36:12 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7a000000) 17:36:12 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3438.736566][T17827] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x100000000000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:12 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x9effffff) 17:36:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x100) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x81) 17:36:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:13 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x100) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:13 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x200000000000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x8, &(0x7f0000000740)=[{&(0x7f00000000c0)="7090fad62a6c198478856b7c3511d851c1a9c93c0a26f64cb9ed3a2a02d9fe1529efe604a4c18e6c8c1e07c5c11f8ab3fee8abb0c8aebd1e1535b6232d5c8eae0e0cd9e72bc7a2514673dbf0b92d81c0b9dafa69e22776bddeac4e0a89a79c2def6a4551b892f2a1b86436f2ffc3d2eaa3a01382820929f7c0e9c6237101beace10f486796d2e33e2336e82dbf985aecdffb8ac712c925cd2a1aec3ebcd982a7e621038309cba1d2ef441e122ff869231e53fcdf2fa61558df4798", 0xbb, 0x80000000}, {&(0x7f0000000180)="f0b36c056c4eea58c730d74f85e324094fb0225f65c3083dc05fc5fca14b6ca1e588a05e8a54c4ce5e9d9fe6dc4701d035fa8b5840aaac6e323b78b86885e6eea8910ec1bb8644ebfee30785d3fc2edef5bddfbb101af020677fe1be1752541ce029b36c8e7c2bcf3ad98a66cc6537b4e900e0e34d4b9cae6906ef7ceb1f8d83a50bb3642c4dc7c0a1aff9e35388f0e88a96acea635b110a053901647f0b76b3a5ec7a4d18d3f4f415b594da34fd3b9237941a440e0752b1088ef9a8b54005a6a298cba841391ff86fd837b6c8059063be0000b27112cf48c9e7f237442b4a88158edb43670efc9a1ada8ff1ca431a7c0f5c1266c6a384", 0xf7, 0x3f}, {&(0x7f0000000280)="681ccbec89c61bbadb2989c55e9c57f1a1c52f8b1d6afa4c91e8e299d866592d0dadbdc3121df1c6359ef78539238e74d2bfed4d69f0e793f5cf3afc5460589581daa55c2d030df6853ae7a4b2a16f30c8548765b0a48809514980efd1c097844a2c9b3755bc3a", 0x67, 0x8}, {&(0x7f0000000300)="fa9afd17eebe0cca2b53cd4d582a1bf187579e3d2dde0df0464a795196644b14b6a6598ae62de322d1e083726b69744e5f1b54a41b246fced7471cde8ac30e484881da9c39333b52fdf7cd13cabeca1b01df53c600a76316cd14d09242f89160f0ce5460b6e1ddf75c4c54fd8745c2a2ecbb2b605246264c0388764ba7ac113e942db08c4cb9efb5188641b6077f5b1095d20f02fecacafc96841c9cc64fc4a902d47192148bd550ea8cbb99d56ad5a704eec4850352c10598b9e5ebd5c195622e6bf6327ae8de", 0xc7, 0x493}, {&(0x7f0000000400)="97407392dd928702178c5ef35950503f883b973384a3c5e3faae07e5c6deb49860e3345af4b49afd4f39299906d3f5c9e6356c8c00fb5efafbd22f6a84117068df229d757912d0988af06d3434711dc1bd5229956d88b95f7985f109feea32025e38674ca2b4280dd0c38af73e66a22c54d8345f2b3e60ef3fc7fd9da115626528aa8e08c7b0662238d1587a962302cfeae034aa4ef2ffc5371abf0e2e171fe496d908c4e32e", 0xa6, 0x8000}, {&(0x7f00000004c0)="8a7752d74ab5a2385708c278b026b788f239192ad9648de4a92d3bd6913b7c97a2cd672a470cd21dae9e1315447b8fc94fa56c3c3b55c4f4485965f34f9e6f650bc2eec5387465904e62a0d82319eddfeb43fad175e1f6db9976882fa91021c1b9b6f452d9588117e0cbf3378288d9a1b8a8a40783bc4abf80bf2337cd446235a6392513bf785faee78f381bc2716d2c23d694f3309e1dec252f99cab4a3a89fe43a9f10ebdf69fa648d5a2b698895c9b24398", 0xb3, 0x2}, {&(0x7f0000000580)="b46d95bb9f5962cab3c0cdfc473d315f194479c9fefd267781746cb5e879d259acaac3a06910fc623f984c1591dbbaf08529829688ab5a6d270d12b73e394a3e88b0245a42cdc53d21c035a80500863a7067b755292dcfde1b6dfbba847a8073e74c3bbe6fff09cdd5525e14b78adc764106945b567d77f69367d1aa229f317e31550ed6dc8097a305231e184d21419c57ec3912405c203622410c5ec06819c4ae48843557810d9ccf478b65960e61da2c90ae0420b794c8b9f21da355179bfd68b9864631db76293bb992590c354b3c58f9a1a2ec66236bbf2866817df767cc7a0ddd58", 0xe4, 0x7fff}, {&(0x7f0000000680)="7a9ac5e7dfa85ce04e3724ae31ed7e676b11f0ec4d84b9d9d451eddacb7b2a8954915eeb9a33747037b946ff0eb48196448c6b88b24b4dbec8e45ce30d746713e275a589162fd411d1f01f00b5115fe62a65ab5dba5ef3b34a69ac97bd7b9b719db3d03091af0e8c442cfda46d62ead013d04ac568a61df75582a7137b993a1a74b9477184ee5121d427b45bde1a0e7bd9c3adcebc9db85e2568572a", 0x9c, 0x6}], 0x2020000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xec5a0000) 17:36:13 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:13 executing program 5: r0 = epoll_create(0x3ff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x50000004}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8000, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) 17:36:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x2000000000000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:13 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf0ffffff) 17:36:13 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40002, 0x3) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xff, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x881000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x702, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0xff, 0x0, 0xfffffffffffffff8}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:13 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000001fe8)={0x20000fffffffc, 0xffffffffffffffff}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0xbfffbffffffffffd) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x3f00000000000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xfffff000) 17:36:14 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 3440.616907][T18313] overlayfs: upper fs does not support tmpfile. [ 3440.655073][T18369] overlayfs: filesystem on './file0' not supported as upperdir 17:36:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xe0ffffffffffffff, @multicast2}], 0x10) close(r2) close(r1) 17:36:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf203000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:14 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xffffff7f) 17:36:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x8, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000040)) 17:36:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:14 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000000)=0x101b2) 17:36:14 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xffffff9e) 17:36:14 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x3, "950f81b162be1e942bdf863144a0bdafb50839d1bcb8b088b794fb35466cae38", 0x1, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f0000000080)) recvfrom$x25(r0, &(0x7f00000000c0)=""/155, 0x9b, 0x2002, &(0x7f0000000180)={0x9, @remote={[], 0x2}}, 0x12) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 17:36:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xff0f000000000000, @multicast2}], 0x10) close(r2) close(r1) 17:36:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf603000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 17:36:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xffffffffffffffe0, @multicast2}], 0x10) close(r2) close(r1) 17:36:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xfffffff0) 17:36:15 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:15 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1ea1, 0x200) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000380)={@local, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000500)={@remote, 0x0}, &(0x7f0000000540)=0x14) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x7ffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003280)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, &(0x7f0000003380)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003840)={0x0, @broadcast, @initdev}, &(0x7f0000003880)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000038c0)={'vlan0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f00000039c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003a00)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000003a40)={0x11, 0x0, 0x0}, &(0x7f0000003a80)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003b80)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000003c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003c40)=0x14, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000003cc0)={@dev, @initdev, 0x0}, &(0x7f0000003d00)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000003e00)={@local, 0x0}, &(0x7f0000003e40)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000003f40)={@rand_addr, 0x0}, &(0x7f0000003f80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000004540)={&(0x7f0000003fc0)={0x558, r1, 0x24, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x22c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r11}, {0x1f4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x401, 0x9f66}, {0x1, 0x9, 0x3, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x536e}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x280000000000}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x558}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r17 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r17, 0x12, 0x7, 0x0, &(0x7f0000000080)) 17:36:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, 0x0, 0x0, 0x0) 17:36:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x40030000000000) 17:36:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2=0xe0000003}], 0x10) close(r2) close(r1) 17:36:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, 0x0, 0x0, 0x0) 17:36:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x40) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x20, 0x100, 0x80000001}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000180)={0xf000, 0x3ab8e6eda93b4d71, 0xf76, 0xffffffff, 0x3ff00}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x22000, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x4, 0x7fffffff, 0x5, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="f50000000ec5ed5f441faafa7c3bd179fddaf863702b8cef21a4d3678fd5ee6a51eb8a8c0c5e5cd757c4a9fe6bbb67cd5c08499a038066a380081af80b1dfed4049e52bd7e0339b84f13a3f6e16e00745a6486981f7449ca4443e84dad17dab11cac4638f17e4e7343b433e0b438203dcf9f6c6fb89dc12a49d9d760356d9bc72a828ebe3a2809794058490fbcfa7ea5efd23354e197a11f1cd236f83f3ef868102ba36e0645f36f7a62b5715b4f20ab2020718256ee24943d93d25ae6e6e099498528071423ed1b34ed940a16afddd0afa48b51715b99c6facfae97e1a8694ad1bdbc05e588043c19e970cf5313450000000000000000000000"], &(0x7f0000000280)=0xfd) [ 3442.388136][T18805] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:16 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0xbdbbc8c5a7a90b19, 0x3) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x8000) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) 17:36:16 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') preadv(r0, 0x0, 0x0, 0x0) 17:36:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf703000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2=0xe000000a}], 0x10) close(r2) close(r1) 17:36:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf0ffffffffffff) 17:36:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[], 0x0, 0xa0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:36:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@remote, 0x4e21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x80, 0x8, r2, r3}, {0x1, 0x87fb, 0x9, 0x1200000000, 0x1, 0x8, 0xfff, 0x8}, {0x0, 0x2, 0x7ff, 0xffffffff}, 0x7a5e, 0x6e6bb1, 0x2, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d4, 0xff}, 0xa, @in=@loopback, 0x3502, 0x4, 0x3, 0x1, 0xfd, 0x1, 0x910}}, 0xe8) 17:36:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2=0xe0000010}], 0x10) close(r2) close(r1) 17:36:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x100000000000000) 17:36:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x9, 0x3ff, 0x1}) [ 3443.267324][T19051] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x44, 0x4}, 0x8}}, 0x18) 17:36:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x200000000000000) [ 3443.585903][T19172] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1f, 0x103202) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x80000000, 0x8008, 0x8, 0x0, 0x4, 0x80000000, 0x6, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x7}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) 17:36:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x300000000000000) 17:36:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f0000000080)) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 17:36:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3444.153061][T19311] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:17 executing program 5: r0 = gettid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace$getsig(0x4202, r0, 0xffffffffffffff01, &(0x7f0000000180)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8e2ab32410d7fa04, 0x0) sched_getscheduler(r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="c39e883bab9de7794679159392c6740b", 0xfffffffffffffe34) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x12, 0x7, 0x0, &(0x7f0000000140)) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) 17:36:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x400000000000000) 17:36:18 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x01\x00', 0x4002}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 17:36:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:18 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18}, 0x18) 17:36:18 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) [ 3444.985809][T19459] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3444.994179][T19458] device nr0 entered promiscuous mode 17:36:18 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x500000000000000) 17:36:18 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:18 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03000000000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x600000000000000) 17:36:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:19 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:19 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18}, 0x18) 17:36:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:19 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) [ 3445.995263][T19715] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3446.016118][T19710] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3446.032840][T19710] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:19 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18}, 0x18) [ 3446.057038][T19710] attempt to access beyond end of device [ 3446.069657][T19710] loop5: rw=12288, want=8200, limit=20 [ 3446.087164][T19710] attempt to access beyond end of device [ 3446.098019][T19710] loop5: rw=12288, want=12296, limit=20 17:36:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3446.123202][T19710] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x700000000000000) [ 3446.209785][T19833] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:19 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18}, 0x18) [ 3446.260996][T19833] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3446.285833][T19833] attempt to access beyond end of device [ 3446.316851][T19833] loop5: rw=12288, want=8200, limit=20 [ 3446.332395][T19845] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3446.339324][T19833] attempt to access beyond end of device [ 3446.358867][T19833] loop5: rw=12288, want=12296, limit=20 [ 3446.377141][T19833] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 17:36:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x800000000000000) 17:36:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) [ 3446.964725][T19965] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) [ 3447.029248][T19966] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3447.045906][T19966] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3447.063509][T19966] attempt to access beyond end of device [ 3447.071155][T19966] loop5: rw=12288, want=8200, limit=20 17:36:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3447.086907][T19966] attempt to access beyond end of device [ 3447.126428][T19966] loop5: rw=12288, want=12296, limit=20 17:36:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xa00000000000000) 17:36:20 executing program 4: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) [ 3447.148881][T19966] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) [ 3447.265632][T20089] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:21 executing program 4: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) 17:36:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xe00000000000000) 17:36:21 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x3a3728, 0x0, 0x0, 0xffffffffffffffbf) 17:36:21 executing program 4: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffffe2", 0x2e) [ 3447.930919][T20211] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3447.992788][T20210] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3448.022470][T20210] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000040), 0x3a3728, 0x0, 0x0, 0xffffffffffffffbf) [ 3448.069318][T20210] attempt to access beyond end of device [ 3448.091724][T20210] loop5: rw=12288, want=8200, limit=20 [ 3448.107685][T20210] attempt to access beyond end of device 17:36:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) [ 3448.121556][T20210] loop5: rw=12288, want=12296, limit=20 [ 3448.151045][T20210] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) 17:36:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf00000000000000) [ 3448.367650][T20444] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) 17:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TCFLSH(r0, 0x5437, 0x0) 17:36:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x1000000000000000) 17:36:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180), 0x0) [ 3448.868177][T20656] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3448.879029][T20661] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3448.888684][T20656] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3448.907056][T20656] attempt to access beyond end of device [ 3448.923696][T20656] loop5: rw=12288, want=8200, limit=20 [ 3448.945279][T20656] attempt to access beyond end of device 17:36:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x2000000000000000) 17:36:22 executing program 2: 17:36:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180), 0x0) [ 3448.990239][T20656] loop5: rw=12288, want=12296, limit=20 [ 3449.015929][T20656] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:22 executing program 2: 17:36:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180), 0x0) [ 3449.153495][T20883] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3449.300013][T20939] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3449.320345][T20939] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3449.404173][T20939] attempt to access beyond end of device [ 3449.424582][T20939] loop5: rw=12288, want=8200, limit=20 [ 3449.455704][T20939] attempt to access beyond end of device [ 3449.466096][T20939] loop5: rw=12288, want=12296, limit=20 [ 3449.477394][T20939] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef001", 0x17) 17:36:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:23 executing program 2: 17:36:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4800000000000000) 17:36:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:23 executing program 2: 17:36:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef001", 0x17) [ 3449.971616][T21013] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3449.974173][T21007] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3450.008853][T21007] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3450.041758][T21007] attempt to access beyond end of device 17:36:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:23 executing program 2: 17:36:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef001", 0x17) [ 3450.083014][T21007] loop5: rw=12288, want=8200, limit=20 [ 3450.093566][T21007] attempt to access beyond end of device [ 3450.101408][T21007] loop5: rw=12288, want=12296, limit=20 [ 3450.108300][T21007] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc", 0x23) 17:36:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:23 executing program 2: [ 3450.421779][T21143] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3450.444058][T21143] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3450.463155][T21143] attempt to access beyond end of device [ 3450.501153][T21143] loop5: rw=12288, want=8200, limit=20 [ 3450.514727][T21143] attempt to access beyond end of device [ 3450.522224][T21143] loop5: rw=12288, want=12296, limit=20 [ 3450.529946][T21143] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x4c00000000000000) 17:36:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1aa], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc", 0x23) 17:36:24 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc", 0x23) [ 3450.975836][T21158] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3450.990242][T21156] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.011556][T21157] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.018559][T21156] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3451.031134][T21156] attempt to access beyond end of device [ 3451.034985][T21157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3451.044861][T21156] loop5: rw=12288, want=8200, limit=20 [ 3451.074416][T21157] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.077999][T21156] attempt to access beyond end of device [ 3451.088484][T21156] loop5: rw=12288, want=12296, limit=20 [ 3451.111393][T21157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffff", 0x29) 17:36:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x5000000000000000) [ 3451.125303][T21156] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:24 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 3451.277511][T21281] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffff", 0x29) 17:36:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3451.421968][T21298] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.449442][T21308] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.468705][T21298] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3451.486449][T21308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3451.521963][T21308] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.543917][T21298] attempt to access beyond end of device [ 3451.558333][T21308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3451.571695][T21298] loop5: rw=12288, want=8200, limit=20 [ 3451.581204][T21298] attempt to access beyond end of device [ 3451.589072][T21298] loop5: rw=12288, want=12296, limit=20 [ 3451.594818][T21298] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6000000000000000) 17:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffff", 0x29) 17:36:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:25 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffff", 0x2c) [ 3451.938608][T21422] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3451.949327][T21418] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3451.976172][T21418] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3452.002699][T21420] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3452.030295][T21420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3452.040877][T21418] attempt to access beyond end of device 17:36:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3452.056467][T21418] loop5: rw=12288, want=8200, limit=20 [ 3452.063796][T21420] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3452.068741][T21418] attempt to access beyond end of device [ 3452.086655][T21418] loop5: rw=12288, want=12296, limit=20 [ 3452.095315][T21420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffff", 0x2c) [ 3452.101572][T21418] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 17:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6800000000000000) 17:36:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 3452.249645][T21544] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x2) close(r2) close(r1) 17:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffff", 0x2c) [ 3452.333457][T21548] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3452.356256][T21548] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3452.392376][T21548] attempt to access beyond end of device [ 3452.432616][T21548] loop5: rw=12288, want=8200, limit=20 17:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x6c00000000000000) [ 3452.460360][T21548] attempt to access beyond end of device [ 3452.482640][T21548] loop5: rw=12288, want=12296, limit=20 [ 3452.495431][T21548] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 3452.501121][T21659] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3452.533013][T21659] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3452.578624][T21668] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3452.591602][T21659] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3452.624336][T21659] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23a], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffff", 0x2d) 17:36:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0xf) close(r2) close(r1) 17:36:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7400000000000000) 17:36:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffff", 0x2d) [ 3452.955766][T21782] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3452.967250][T21790] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3452.974954][T21782] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3452.992442][T21782] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3453.001752][T21782] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x20000010) close(r2) close(r1) 17:36:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e40e2205d2ffc118d020000000000103ef0011dcc606aed69d2bc7437cebc9bc2feffffffffffffff", 0x2d) 17:36:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x7a00000000000000) [ 3453.285495][T21916] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3453.311624][T21923] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3453.332259][T21916] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3453.379336][T21916] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3453.407791][T21916] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x252], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x6, 0x321}, 0x14}}, 0x0) 17:36:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x9effffff00000000) 17:36:28 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3454.576283][T22038] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3454.611655][T22040] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x5, 0x6, 0x321}, 0x14}}, 0x0) [ 3454.627200][T22040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3454.660538][T22040] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3454.695953][T22040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:28 executing program 4: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x1c5080) 17:36:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) r2 = dup3(r0, r0, 0x80000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0, r2}) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@mcast2, 0x4e24, 0x0, 0x4e23, 0xffff, 0xa, 0x80, 0x80, 0x2e, 0x0, r6}, {0xf7c, 0x4, 0x9, 0x0, 0xfffffffffffffff7, 0x10000, 0x3, 0x7fffffff}, {0x40, 0xfc, 0xbad, 0x1f000000000000}, 0x101, 0x0, 0x3, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x3e}, 0xa, @in=@local, 0x3501, 0x0, 0x3, 0x10000, 0x2e12, 0x9, 0x2}}, 0xe8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r5) close(r4) 17:36:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xec5a000000000000) 17:36:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 17:36:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 17:36:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x272], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 3455.997339][T22166] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:29 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 3456.059169][T22172] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3456.098923][T22172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3456.114155][T22172] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x600, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x8015, 0x7, 0x5, 0x2, 0x0, 0x6, 0x800, 0x7, 0x9, 0x0, 0x7fffffff, 0xffff, 0x1, 0x8001, 0x10001, 0x0, 0xbca000, 0x1, 0x100000001, 0x1, 0x3f, 0xffffffff, 0x1, 0x8, 0x101, 0xfffffffffffff737, 0x52, 0x4, 0x7fff, 0xffffffffffffff06, 0x6, 0x40, 0x1f, 0x1, 0xfffffffffffffaae, 0x2, 0x0, 0x13, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x275cb016bedff308, 0x8001, 0x9, 0x6, 0x1, 0x0, 0x1ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000001468) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000000)) dup3(r2, r0, 0x80000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x7, 0xffffffffffffff6d) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080), 0x234) close(r4) close(r3) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "4bf7fc6d2578a6567042e442cffdea37eea78c46"}, 0x15, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) 17:36:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xf0ffffff00000000) [ 3456.164114][T22172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 3456.271144][T22286] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3456.299650][T22292] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3456.321110][T22286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3456.361001][T22286] attempt to access beyond end of device 17:36:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:29 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/sequencer\x00', 0x400, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000003ac0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) alarm(0x80000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2, 0x4, 0x6, 'queue0\x00', 0x401}) close(r3) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r5, 0x9a, "52eb5e", "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"}}, 0x110) [ 3456.370537][T22286] loop4: rw=12288, want=8200, limit=20 [ 3456.384691][T22286] attempt to access beyond end of device [ 3456.430245][T22286] loop4: rw=12288, want=12296, limit=20 [ 3456.466439][T22400] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3456.472367][T22286] F2FS-fs (loop4): Failed to get valid F2FS checkpoint 17:36:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xffffff7f00000000) [ 3456.510186][T22400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3456.528950][T22400] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3456.559815][T22400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3456.621827][T22423] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3456.622673][T22416] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:30 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x30000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0xff, 0x6, 0x1, 0x2, 0x6}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) fcntl$getown(r3, 0x9) [ 3456.678272][T22416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3456.680449][T22414] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3456.716591][T22416] attempt to access beyond end of device 17:36:30 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3456.726144][T22414] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3456.757524][T22414] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3456.780182][T22416] loop4: rw=12288, want=8200, limit=20 [ 3456.790442][T22414] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3456.810252][T22416] attempt to access beyond end of device 17:36:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0xfffffffffffff000) [ 3456.826091][T22416] loop4: rw=12288, want=12296, limit=20 [ 3456.839943][T22416] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 3456.934630][T22533] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.001455][T22533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3457.021061][T22533] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.050089][T22533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b4], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:36:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) read(r1, &(0x7f0000000040)=""/221, 0xdd) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'bcsh0\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3457.271273][T22659] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3457.287439][T22657] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.299900][T22666] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3457.305558][T22657] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3457.318483][T22655] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.335135][T22657] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.343178][T22657] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3457.351876][T22655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3457.369541][T22655] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.378742][T22655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast2}], 0xffffff65) close(r2) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x3, 0x2, 0x3, 0x1}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$RTC_UIE_OFF(r3, 0x7004) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="28fcff00e7a73037fe84c60f53d1917684a4c45c8b1125566e08994e5d8816759e2e1943990bbd760187842942b70bb7bb988efb5ad018b0be969b3fb078772492359f1d613eb7efcdb6c9071e0764c230acd97cdd850126541147a39a5e40ffd0f0e8eb4ef51e3b3f9022ea22272c06f943f85b783c7c954c4624ad8a5c4847ef137d51e3676cde762b3f29f149fd0d7565aa792e01506f779466a5d84e2445d6d93dbec827ef9c06e2ca8558c8b71ec24b67149c00000009f9e53920bfb42826f43e95e67feeb19b5b52a8200d56c8d4d02347f6ae044d54f79d20b5f43d8423a721e39cbd46d29204b4c7c76e3c5ccb938c5a13206374fc7addcbf302f5d6df41c271c0", @ANYRES16=r4, @ANYBLOB="00022dbd7000fc4961340de5dbdf2501000000000000000b400000000c0014797a31"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) close(r1) 17:36:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x42000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x2, 0x400000000000}, 'port1\x00', 0x3, 0x20, 0x6a, 0x90, 0x2, 0x100000001, 0x81, 0x0, 0x3, 0x6}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000001c0)=""/107, &(0x7f0000000240)=0x6b) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:36:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="220e67f5a0939fec51aa56d1724e45a108e69dba2beed5962856ad47c0db715bd5bd7534814ba109dcec97a880a865e3e605980f168b4e0fbfb586d287c8ab12c4c6b6fba40156c11d205954cf21486393432326ca5f3f3998544b0b2ae8f498f30db7d534e005aeb7314a9431f2dc5f489ed943b34e77697e4c", 0x7a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x6110, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) [ 3457.608007][T22779] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.625626][T22787] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3457.659525][T22779] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3457.670648][T22779] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.688049][T22779] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3457.746180][T22799] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.777414][T22799] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3457.816831][T22799] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3457.856606][T22799] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 17:36:31 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = accept4(r0, &(0x7f00000019c0)=@caif=@rfm, &(0x7f0000001a40)=0x80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200129bd7000fedbdf250300000028000600040002000400020004000200080001000000000004000200040002000800010001000000"], 0x1}, 0x1, 0x0, 0x0, 0x2000c080}, 0x41) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@in={0x2, 0x4e24, @broadcast}, {&(0x7f0000000200)=""/80, 0x50}, &(0x7f0000000280), 0x10}, 0xa0) 17:36:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000001, 0x400000000000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003200190106004a293d5738071432afbc5916199ff7c800000000000012000000ffd28d9b0c0001000800100004000660"], 0x24}}, 0x0) 17:36:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3458.196061][T22912] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.204455][T22913] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.210292][T22912] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3458.232441][T22913] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3458.245518][T22912] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.255714][T22912] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3458.267003][T22913] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.285366][T22913] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 3458.450976][T23032] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.525722][T22916] bridge0: port 1(bridge_slave_0) entered disabled state [ 3458.535395][T23032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3458.556179][T23037] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.574885][T23037] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3458.580163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3458.588866][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3458.596479][T23037] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.614934][T23032] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.620520][T23037] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3458.639200][T23032] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3458.660123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3458.665984][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:36:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7ff, 0x81, 0x0, 0x1000, 0xffffffff, 0x5, 0x0, 0x80000000, r3}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x97d, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x689}, @in6={0xa, 0x4e20, 0x69bb, @loopback, 0x1ff}, @in6={0xa, 0x4e23, 0xffffffffffffff14, @remote, 0x5}], 0xffffff81) close(r2) truncate(&(0x7f0000000000)='./file0\x00', 0x400) close(r1) 17:36:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 17:36:32 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x40900, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000032001901000000000000000057350000ffd38d9b0c0001000900100404000660"], 0x24}}, 0x0) 17:36:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) [ 3458.931633][T23050] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3458.949199][T23050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x400008060fd) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 3458.986413][T23050] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3459.006667][T23059] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3459.027794][T23050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3459.033076][T23059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3459.056349][T23059] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x20300) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) [ 3459.089451][T23059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 17:36:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x5c, 0x6}, {0xfffffffeffffffff, 0x6}, 0x4, 0x3, 0x400}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r1, 0x0, 0x1, 0x3) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000180)) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000032171901000000000000000002000000ffd38d9b0c0001000800100004000660"], 0x24}}, 0x0) 17:36:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, 0x0) 17:36:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x181) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) signalfd(r3, &(0x7f00000000c0), 0x8) close(r1) 17:36:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) [ 3459.490687][T23284] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3459.506258][T23284] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3459.551856][T23293] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3459.552344][T23284] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) finit_module(r2, &(0x7f0000000040)='mime_typevmnet0/system/\x00', 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3459.595920][T23284] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3459.615584][T23293] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3459.635835][T23293] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0a071f123c123f3188b0707246b30fac36557325c0c14622d2d75a6d473d3f1ab261492315834a2181940670fdea38f999f1cdf189451b10626ead78b6231784a3e555bd0b7262931214b25d7eed78a9fe44e83b6bbbd94de48460973341f234897de63a1248af28ddf7a8f94aa34bb5ea30b10b073b58130b8108df52c4fbefc7e057acb00068b903cac73bc6fcba42f0b639525a06f0176b6c6475cffbeff581da0724d672859545bb33a811defa5471a8350ce7f8fa4c7e4c52288d0e2d0bb147a9c2a0be98bd3a0cb1b646f8c077a83eb6952cc58db45c6b6a5ebee296dc1a07158fb7") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x12e9090, &(0x7f0000000100)="221ce4eb72a079ae0e9605ac008d9d1227a78c6ee37adcaf9d8030cd30013b2e061ab43a9eeda2ea203e6bbbb7c4fa52f2cd68044f1a0a483bedaeccd06193afe221261faefcf08a78288103da3653c636be3d5dcf0c4c12add6fe014ead253e7314b8c835e41eb5c5287c1fe16be95c38fad9771649d1fb78817abffcbca227a4bd2af739867edefa0d1a6c95e52bc88ed5174f1cef54cdf991ce94ae7560a0298d2ca044925051a9a2369799dba0d90624c6b63180bd2f57896890fb68") sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, 0x32, 0x119, 0x0, 0x25dfdbff, {0x2, 0xa00}, [@typed={0x10, 0x84, @str='!vboxnet1#\x00'}, @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x30}}, 0x0) 17:36:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x400008060fd) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 3459.656515][T23293] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3459.765067][T23406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, 0x0) [ 3459.858739][T23414] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3459.872001][T23414] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 17:36:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="200527bd7000fbdbdf2509000000640004001400010062726f6164636173742d6c696e6b00001c00070008000400ce820000080001000700000008000400fbffffff0c00010073797a31000000002400070008000400ff03000008000349964d8a000800030000100000080004001b0000006400010014000200080001001b00000008000300030000004c00020008000300174c000008000300ff0300000800030007000000080003000700000008000200810000000800040009000000080001001500000008000200f8ffffff0800020006c60000780004001400010062726f6164636173742d6c696e6b00004400070008000300030000000800010004000000080002000200000008000400090000000800010001000000080001000f00000008000400f700000008000200633700001c000700080003000900000008000400000200000800010001000000"], 0x154}, 0x1, 0x0, 0x0, 0x40011}, 0x20000010) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@newae={0x1c8, 0x1e, 0x800, 0x70bd27, 0x25dfdbfe, {{@in=@multicast1, 0x4d5, 0xa, 0x3c}, @in6=@rand_addr="d2a4c91cc9e92718e4de5c782a536d10", 0x7}, [@sec_ctx={0xa8, 0x8, {0xa4, 0x8, 0x1, 0x6, 0x9c, "3b50a3d46a13139b31c68f77494b839b37663c57f360a2dd30c05455be6bea0de547604e10306c346069dd08153950f95cb123d1f2029539c92d754cf3f99deeb1564f5e4f51b33cb47b6abc4e3adfd8064b214ce2a94789357b6e9f234b3b4d75ca021db790300c40c6355b5a4323dfb40c3d4556746da70a374f1483d3c0dd1fe329dd1ece218042f157ba33e3267b233d553a65fe390e7dd75a74"}}, @sec_ctx={0xe0, 0x8, {0xdb, 0x8, 0x1, 0x1, 0xd3, "ca5bf107a07e5507d886741e2041fc540e730a86f6c019645f91572d99e1815c6f4565c3174f3859363fd8a89f3d0e237c01c4a5d44200c7877e12dbeda63bd510695bf1419a0e36fc6a5b03482734e98c199d396169d5c606bbec2e0f7d22e26ece11ff592e463c1d878c55b061077bd75c6ffc57e7cf8fd14b10ea7c0cd4e9407c74ac65e8daa0c5e34aa8e2c41ca7ad3e80d4c573ffcb0106d25f3572b068b43d9243af1987fbf2c43a9748e32db5b6466bc61ae4d15a0071a658581f2d712b98ef67f98a4eb34b9601c16de94748e92529"}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x50) [ 3459.917160][T23414] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3459.940447][T23414] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3460.000595][T23469] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.012271][T23469] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x49, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000ffd38d9b0f000660000000000000000000"], 0x24}}, 0x0) [ 3460.055609][T23469] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.067962][T23469] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1400}], 0x0, 0x0) 17:36:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) [ 3460.290496][T23532] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.347013][T23532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3460.348802][T23591] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.384678][T23532] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.408425][T23532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 3460.414218][T23591] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3460.450409][T23591] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.472215][T23591] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) close(r1) 17:36:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1fa) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000100), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0), 0x0, 0x1400}], 0x0, 0x0) 17:36:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:34 executing program 4: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400008060fd) ftruncate(0xffffffffffffffff, 0x208200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) [ 3460.798899][T23667] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3460.819283][T23665] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3460.855378][T23665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3460.867584][T23665] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3460.877365][T23665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x4}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x200000000000001}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r1) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000240)={0x8001, 0x81}) sysfs$2(0x2, 0x1, &(0x7f0000000300)=""/167) prlimit64(r4, 0xf, &(0x7f00000000c0)={0x0, 0x9107}, &(0x7f0000000100)) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000200)) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x101000) 17:36:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0), 0x0, 0x1400}], 0x0, 0x0) 17:36:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) vmsplice(r0, &(0x7f0000000040), 0x0, 0x7) close(r1) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) 17:36:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10c, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @generic="14c87fbabfb4f856c0565a4b5b71b215b33171de5336aa2b92b3921ed9b97134505582b2bf793a37a4fa58bcd083b7ac96f2e83db8f0b149afec405745949548e6f74f5dc92b9da0fbc6b58cd6c13f180c1a877e154096021d964a507e2d619df265fcea7ee790bc5f859b6fa7530f1339da485ef7539b86519e284c80c925d8b1bd2faf8880aac0b117ddb1c88773088de0ea4792813baa5810c20bdc0c14b43794416c10daafe4da361d726551d4d7c5ba9e7ed85cd8b078236d3f40afaa9694c46c17855c8a5a2aad2007975b71d09d327070e1e0bd6c500cbc32541eb87bfb2225cee2f7a54dff3cb1c46135e0e670b064"]}, 0x10c}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x10002, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x2) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x2, 0x1000, 0x8, 0x4}) prctl$PR_GET_FP_MODE(0x2e) [ 3461.228442][T23790] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 3461.279548][T23790] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3461.307607][T23790] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3461.332546][T23790] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3461.356621][T23799] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:34 executing program 4: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x400008060fd) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8000fffffffe) 17:36:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0), 0x0, 0x1400}], 0x0, 0x0) 17:36:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @rand_addr=0x1}, 0x181, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_team\x00', 0x3800000000000, 0x0, 0x10000}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x412001, 0x40) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xf) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000140)) close(r2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000180)={0x7, 0x0, 0x2022, 0x9, 0x81, {0xffffffffffffff7a, 0x100000001}, 0x1}) close(r1) 17:36:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) [ 3461.638630][T23902] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3461.681954][T23902] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3461.693889][T23927] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3461.707085][T23902] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3461.726182][T23902] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:35 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101001, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) 17:36:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x240, r2, 0x21a, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd6}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87f1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14de}]}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x814}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x265}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000400)) [ 3462.090868][T24040] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3462.142967][T24042] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3462.180347][T24042] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) close(r2) close(r1) 17:36:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) [ 3462.230708][T24042] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3462.261635][T24042] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) 17:36:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:36:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) 17:36:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3462.470632][T24166] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3462.581807][T24175] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3462.626968][T24175] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3462.636841][T24175] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3462.707091][T24175] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x362], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:36 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 17:36:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240080003200190100000000000000a4fe0d02b92f353f9b33dc010008001000290ac7b6"], 0x24}}, 0x0) 17:36:36 executing program 2: r0 = epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2101, 0x0, 0x0) 17:36:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r1) 17:36:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e0000001600000002", 0x35, 0x1400}], 0x0, 0x0) 17:36:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) [ 3463.017249][T24302] encrypted_key: master key parameter 'trusted:' is invalid [ 3463.073157][T24304] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3463.099167][T24304] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3463.125074][T24304] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3463.159013][T24304] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003200190100000000009d9198da05ed48c618275900000002000000ffd38d9b0c48c7973feddd8eecb9e199a03b400b18c0990e537752850a268ac4d406000008bb29faff84b68c8666c2505a06f15b6afc0d1f4e3d80797c29fbc7f878006d55863f12ec3ecac0cfc4f4d186a47f976c44df4fc86dd8d69e3a1f2a5e6bd3d819522ed16fdeb1bd128dc48fbf5ce482bb1ca902c4a908416075ae680be5883016f46d9404ffb03d210c2399c1f54edea883228ba6f068b70a0a448785324c64703d68c8050d8c5a9726792d4663ffd1222233f413ae177bf718506d7254757a5beca9bef98f3e4015e0c934f6c4fd51c8ede97ac8766dce53426975714e20319e37697ddb1fad9e1e977a443981647c39e0811d9a236de1f91e28b30869eae1ed85e94b20e431d2c0888bb32667cf353ad5712e67b3a934270f1ee335492d2b482ea304fa31dff48fba3955ffb89f7f02dedb24b2b2228add667d5e37539fa75dd11ab12472b64444cc3a4ff83348e9f1fe3c257961ebf5064aa1a1bb293ace40aee801d66c63b118387fc477536e5e4bbe384787e3644667798a6e1311f5fcc513fec4406cc97982306827dc28679a3a9fe08eb3f23d4066a72c3dd045afd31419a71fdbb777404aacdb9a74fa3f4772db00d0e61709938e00ffddd7733ef21706ed4a3f9839d24340f1621957ada9cc0bf01f5b60515f487e560bb32326a9072654f5af28e82c9d39234bb03042622f68d19e53c8d9e8d83cc1261d4c016cbc7d00ed9887f258d5ec70d7b5232226bc1801f33da435721eb54f41c562ca0b258929689ff9cf47804199906b0b2a6311af41f8599e36b4c2661bf9031ef162584b8c89b38efaf41b9d05a2"], 0x24}}, 0x0) 17:36:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) 17:36:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000000080)}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000140)) close(r2) close(r1) 17:36:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[], 0x0, 0xa0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:36:37 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) fallocate(r0, 0x20000000000011, 0x7ffd, 0x8006) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000032001901000000000000000002000000ffd38d9b0c08010008001000040006603d5fb9a7d56f139f296ab7678ddab6c27bb88960b91f52bbc9a60b6f12a55cf31c7881fd9d4b2ae85a7a48747d1c5a07948a1f8326d3ddf28fe18f4446221821dc09b1cb89dddfa761f9fee4e27fbef755841fbe058fa562a0c9a5686ef3adbc6f603e5ed5d0eb79d0ddc01e9e36d65869afb6f0aa812e7e1353c620e334ef3ec8231f421fb1dcd31556200cad6f07af949ad13ff5859306097a727678076fb706609f18a8edc92ba323"], 0x24}}, 0x0) [ 3463.481388][T24504] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3463.509251][T24504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3463.561187][T24504] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3463.616815][T24504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3463.695500][T24543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3463.861032][T24301] sched: DL replenish lagged too much 17:36:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) 17:36:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x400000000000168, 0xffffff7f00000000) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0x35e) 17:36:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000001540)=0xe8) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x6, &(0x7f0000001380)=[{&(0x7f00000000c0), 0x0, 0x5}, {&(0x7f0000000100)="bbc823d8281691dce900b55468d0d5b26a9d2b3cc231ffba1176359c1163b6ee3d24a6b9284d152cbeb98bd652733e5ad9ebca9a1b9f4f20a70f3113b18de89fcd4d86d0144c5af6329d28a6c8ca96fe1f8a225242ece4b7158e7a87a1a3782181f9514fd5d0ed5d96894424db95ba7365f0b452e23c54d9c3dbf3855ab66275c1ecf43770a8066274763c85ff", 0x8d, 0x9}, {&(0x7f00000001c0), 0x0, 0xc1e}, {&(0x7f0000000200)="f5bda3b7fd42860e97ef3f004f1f2f233f2b4d3c7399e26aaa25fb6709b32b2802ae20318475ad39e73d3e375203a0be8c87e042a1ac1d635366c633e4dd08d839f5081d5a6d461349ab01083c67eed6dd8f5582ab070722641839ae471190cc64e68926768d648645f0dc7ffa5647b5a787edb426ddaa801cc1b510e169bd9215c7a5ac443dfd8bf8109c8d2cdfb77c1e", 0x91, 0x5}, {&(0x7f00000002c0)="225bd082a0dae2fc56072cbfe2be647514f2a570f7d9764e6ae995594df63f0c234dc179ccbb2a074795f120f9ac615b7df9500a3ea9185fb66b793bc7f7b83f4b1b08a79699b1b3c00781758b879dbb289edf76b34a4146f87713a21a468b42cf4b08015b7a5fa62315702764416754af24e246a47756dd2de870450f8110b5b5f64ea514b7e6c4bfd129dcd218541782299a22457958ebd7502250e0efb475f5627d6604c8d7cd6488d2fc57502316a99cf58e2baea585d86470834621dd499d9d47963507c5341c7e4ff86a947b9b25a3688e8587e0b08f41ff31b14c5281ca20f8a3e37be00fc988c6b8da05546ac7a1c6f0c422b2bf8ab57efbe9834889b6aa633c27cb194b725dc74c3680ed8f68d4e28a34ced640a4c8eaca45773e0e91f23ad58d19c6d3dc26b2b931760cd0e90c4e77cd348bffbab2331c5cbbde61168f7085a7500dcf4df38f20f5ef44ce6b09d5937ee90def0d99f24c0fa727eddbcfad108965d729e5c6c499732e93e63902e931a82344f6a442a0937aa62d4b0bc5b25ccd461bcefeaee2c294e451fd124c8093c9ef4ca03825c1de2eb555a8f046058da89f30bb61983d16885197bad86ad8baec04bf9aa7dd67b54b67aa8021e0bfa2fdd53f9b437b1c6dc6cc307439dc9e96b6642b055f69bac3924dfe25c1210a7241b0afe25eb07283a75f8639bf09574ba6833a6d96aaca6865f768a8d18ed4abceccfbebb493d3d86930979235b8b29fa315a1f6dac8df72543ea251a7a1832a9cc49b3b272dee6057aafd83ff6d71352bd5ce6e5acadad896dbf729929e1c2fe08bc7a1c65f5e785a5a47d772b21c9d655fcc2ba12d76487340c9672a3b8b766d60e563f73959d50b731c3cdf8140a5e900b442137a1f128fb23bb633fb7bb5ecd22a8c8b96639940dc02ab455ccff105e5a5d13a78eaaaba4d239c191af3162c7aa30da8b99a4c66cc707d47d0bcb9d7e9e62832743a575d14936606e06b33344babe2af1804ccf6b3bc5aa50326641a53b36d84b4c12beed782e66b8881b24e9c29ebd689458ddce665814f5b4350ec9a9c8733810053725bd57b9b3c6f5c137e509ef668a622b8880e1245c71c005a7352d450241619fa467a34307c4ee8a7684abe752ac04a06d0d9c7f4102f08b17c752a7d265fa0aca92cc8a4f81154b00ce498f62182b4deea46beca598fe152934a5156455b48fba3e4fe82d6ee44687eaa3f89687aadc860d0313b0cc6bf4544a18a2ce1049e4c4982ad2e1a57cebeb0d49068c63351889c8324c3817249e977d2e53ebfb3c0551f3e183ab6e1774212b4f2c5c999e099fe1b8fa5efad7200396ab1a79b05aaf38db94c4df4e0461eaf13cbeff60eae86f0facd68f0111456784150244fac7e7224ffc81f575ff3aa3522b21c6777551040d59432eb1b4ba29b3d611198677442318f56c755e8ebf01c55fd1f709888a40a16ade673f65c61d218f87b5e1df28a63092ff204691ad69a0e95506c92dde62abbb410ce13054cd36ea9282fed539805f59ae8ff8271b8615fd4daefa9060033e3ebd1fc43b7d8eb7a7a42c089e7ac4792174d9f045dad4d7fffe5291dc57992351ab63475925a0975850869dacfeb6bb277d3be366284e07fc8b81a415b494acd821b9f4f83a48c1e2e5a429fc92c7fc515c3dfb153d4b01999449c370d1a9cf7b0cb575347d60f3e56203b120c20626645cb31651bd3e59d61ea0071101e10c999ce8d99ca46d2f127450e089e60c1a62dc8e4a5fee78104cde688e9ec5a75cf4524ef4965d94f075c2b061131a333dceeae260247c646a8e61aace4cd41b2aed626840ec0d4d64588725ac8f59c37701d8d52a62aa70cb5c810802a14a547beae331969836d8907924a119781b46810273c928061a175bf44326ebcc939fd8645f52c4f6e0c54e89255db421c62d5af7e2841585736298a70e3e9e34270ba59d8de699f5ed1ff21cf24fb43180cf3c76596051c1dfba4c8eaafc8b3e19fc533a68802c6e8dff90bfcef17bbee057613717a2cf4008f88251450ddf77db4733e906e53c003e71f0270dea0e533b1ff9a7986ba9bbbc5814fc7be9be9db6df094a15291f1ab5f7570c943ef9fbe59a1bdf7b4255c587a1b6359ed795f913ae3e669af3b2e8f76b966428d99483e0c988e0afb06668c778e42cc26c4e7aa30bfc282de5c98028130f750811f56d85bfbfefbcb06ca2c70e8a1347e80084ee59604d90d9f66fda2e95cda17bdfe9d39a40fdd06920d13b9903c23f9c167a7c18afc431257dd23fcded6d0dd9ae2fefac9534e9ade173f8a61520803ed64e726788295f11e9dba2a4f2106ce00db6ea67aea4cdd488376f8e095713bb7d92a42c7a8d733aa0a69f0694ef01a9d1b4be695601ba60a747f493ecde6ec981ebb21e861e46dbde4ccec0a0367d5dac5a3c5468b8b2f73b06e51661ee79afc655ec5e71951aefc4df5c53b065731996ad4471f68686089f4758cdf3d28e4844ae9092623d89704a800e5984abe9c8c428c1100f9aa49608e02408f52abdfc4a762db034959614f4d3d9bb6e4630839d0070d96048eb344776ce81e92e251f33075e92494cc8965d011ff610fe742871e69108bc4cdbeb39e4d7fa7b7436201a9591208ea34cd50f7e763c0ed672a0bf20adb9e79ab69159fa369a5c4f17cc26724b1a9a079d2a89fec15cfeac462cbe2001e979610e7984945c7df173286f81581b564281d6646ccf1000073df83d3388e9353eee469b40babdfb0ae815ed76655496dda5548f57980d432d123c12fb58090d1678926c6151af5767ae751b81c365e1e1f69f5ced2826d723543e3dd1471528c4db056cb1a489a8d25b620e47a099a7ac6f06b2671d36f97db2c409f73505f1c989e058b0438890aac9a9b930af6004f9068fd0a64752242ff304cc4f75962767cd014fd0a13beea7ea3fef1153ef8a238571fa4efd7e158e7d5d1f1b18a16a61c49f1e6bd4b2c62bbfc60a219594cf7f57408ec421407e6e944dcaa3fb6f2a013e53a33dc6f75a58d142b11b522c99e205708021820d360f64611d39ac21fafa56c7f9dd50fd4b60468456b19c8972370a3b04d96ec2e24b92eef85954e26c5422fb0735986813c246da0ea7bfa189096013c46d8088ab6808c1b41d6611f9cbc75345f3404e2263ad5112616dbf9136659a8c4813f69177c49e72d27c3b0486afcb27845cb6203e471fabc085639fa64815a61340bb2e87e3f533c30619ffa966cfbdfa6bb123d7ec8c55e5b9539c101065ce958f1428d7181746137cf3d8bdbbfdbae78b5dc412a992db223bd407bc72acd61f3d04ec441af3c68c65c5d600a98e0131a7cb61f81cc5a1cdabab13a7fb44d9ae7a2e376205889a32f2a5a46a13ed596ef82a35a92c908840d1ab93cfa7434877077265a08964dfc18c3b9ce2cd39c7f6e003e65424739414883e7b47c2fd150afd570e49e46f064d42a545cf02f574e9b1693e6671b3099dfa85710f90f7fa85bbc466fa34e7893f45798913c0017dbea42ad4fa7fc4e8266870abf158e1dd34c49d3cceb9da0f427357390234df1f109481e80490342fdaedc27d966d0427e6a45cbd5e26745324b9baa28decd36660c14bb6169dd17ba9179cf7950de6174607beee36140f87bdfec66a04a27cc71044e68bd74c33a919796ee5cf5d08eae31e62812840e774123754a8e2b1ef6e7aa8d5e737a6194b77261d6245175bf51e78a13914cc16ccd6c3ad649d8854052d270ac8f10bcec94992f7aeaae9f49390c11c5a38bde8e00dd6f90360d0f723f9b2e62a4fd0787633a1165f1254c788b565059263b1339ebcc5e2a04fd6e158f9bdb382ce1fee90abe212149d0f91b9a63a3fd7d2a44c56f4fd1496af633425c17d062d483ce5f2db5bef5b8e944022ffbbea2a495b9d0e8458537b02b952cf3e22100d8353109babcbe59e434d49b88dd386cd7af3988d74cd5a16a0916449b04eb81ef428351c02c632c41291a140e6e97ca3bed851fed1cb1158bef843e967842a128b872660e57d9ffcdf9f2ec4db06e65e5075cf0615448df5858a749d47993ea0c837fca7f985d6fae0f867f2af35d76dcb3ce9dc419115b6d904c54650df9c8925a1220c763a6fbd84f346e984315fe1e11851d2364d7ba56aa8a4ec2efe953f03cb890b1be1eea5861da716510e9f3a4533a6f4ebf98716f89056093080d6fdbf2953013a57d98aab94a08fc317f5259846aa118351868c288a6900b1c06fd8f4633c8d38a090e43df2bbbb3d43d2b6b6ad0cb78f06e8c228c85c4712f3a23e5eccffa186c2d39b3dffde6dbc953059e1f2695dee4101b4a138b22379f711ed3f3dfd26780a3e59a7989be9f584b5b253ebb164617c4f4684140f6fe501ce672383b07857527712b1a0d588adf4c0f8dc659678d44ca69231aebe4f596ceeeaee849599e3e7c2245299b26b3194569cc74c9b2151b42854e7c45ec8c3faebee0baca882f3ee88bab4bf2c1b5e0fbdd29d2528dffb3ca4645001ca572e6abd372e24c16b5ba5234af2639387fa917fbd8feb3f9b42708ac167657c21bf26e5c6d05e7f1e2af96bcc3e44857471e1b9ebc9c5f639c4d7cc7712ff99cdb6dde0f631571ff3b48af031662d1df9c1de2a9886ed534a5421b3f1b53516b56e237e22872f233058a5560b26e05111ac289615ff925bac77797323722f48c82b70180e69d083053ff055aec432f2585da9cee4917b84f2239c90edccebce5d670bb20def49ee8cc050d7dddac4470f2bcf3c07c2b08244d0bacd79dc146003aabe02445becf13234c9dae9df7b674c22e02a69ee77021a674dfe62b5c6e372a9f9b34ac50c689df794784af6891545a2309eaac65d9b8a4e054747a3089883af88224959c3861e4d9b3974038ec6a56e04b90daced2ae6afd99ab8d566f0db21393237e57c833911296b7bb9cf582b578694b103ba3ac0af30b034c1039ae6540e6aef9cebd26c642485416a59e92e0f16bfd21e8339563130205ada1b094ce8570d2e640ff87f2c42d73a1f6c4b77b40d5db3562e241f39dfcc5e9b8ce981928316454f4293860441042eb812af1be01095a05513e21656b67c8e292d33a428cd82b357ce08cda2b470dee078a6fba149b268aaebf16d93b922f096370b6a02ce0d9ac4b2621917b4460b69aa722c98eb17e436b54adf73467e7c2291aed13334cd6997ebad8a149597a60b41a0d8f76fac07267660ca1a36eafc5f05f8fa5770a7c22e86d5f2dcb517f8e87881467860710eaef03c5a5af42d7b12b1de10024cffa79232871ece720dfd4287c2227f77c60984709de4ed497e434018981c164374905dbc4d3eaf37fb74e3ed1ee8e601d10804b5bbdda90898e54334b11788cc4dddf6dffe84fb547b22ce7d9303de68148d0993ab3aefb7043eaf8b8dfaae99c42e11d54c4f18959bfaa320f15b635c6ed01b357c686dc0b8172e41d065e9c106d6f76517a69156e7e2ab4717058253660990bb086cef56b63604072e151f1f6c3997de2c4a02f9b449e0e748b78298e3fd2d206ed9829ad7b82aa272ad9cb0e981b4c9ca7adfd8e532af14ea0c8af2295ee52cddc116a5835481c9af17e4a96d8b411503212ae214c5c0a60514c983786a72b0cba6adaa3ee41d588c3c048ab4dceb9022711425de0cf689fdf0f03cb6ee2e944cee5ccce4b3b435fa7c2c22b29b05ed1e8589658474dc556e3a5cb4ee4aedf9468b43e67fae7d8c60be61185b3acb8ac40968e27c9c7409da1f2c41c9eacb11b6ae6e960d5099cf4", 0x1000, 0x8}, {&(0x7f00000012c0)="cccbc644b32ce0df7a6d581334ad7e84c95fb8fc8da6cfe3e074569ce3c0bcbfda1d09cf3122271076fef7c99a3156a30bb48d6c1b1c1fdb4840f6c8f71ca19892a24afb690c5924f7ed2127cc2c267bbed6629df584fc6ca78db3a98ee233fc0a6632a86c98fdad9be52be32514e95a6d021315c571e5fe2c912da0da5712cedea8085977463dd38c55051971218774272a6ea4de2bafccc0", 0x99, 0x7f}], 0x1000, &(0x7f00000016c0)=ANY=[@ANYBLOB='quota,uid=', @ANYRESHEX=r1, @ANYBLOB="2c66736d616769673d303030342c00000000000000000000000000000090954eb8344194c432a09130a27f07a408d31f5204785d2d81deaee9e0001991d0b2f8a577ac844d070720740a1a1dab0cf2ba329bb4abadb8805a27591cb8591242d65c26c6ef1414b4a75a532bbabf7244caaa27e4f8854f563077b16283a713850c6be83213d9f8aced622c829781d9fba53a544f70a8cc61746151eff319abc31c6ea63895ef6243339fb3cc6e98644dae80a30df5659fa8078016fb7d9dd505132703865d409b654f8ee5e9e1b00be2b9efa040c13fef8d347b296ba0963fb44374f33da858de29bd5bb2533ee9b8bf3d8d04969562822d"]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) r4 = syz_open_dev$radio(&(0x7f0000001580)='/dev/radio#\x00', 0x1, 0x2) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000001680)={0x1000, 0x1, 0x5, 0xffffffff, 0x9, 0x0, 0x9, 0x8, 0x6, 0x10001}) close(r2) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000001640)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x0) perf_event_open(&(0x7f00000015c0)={0x5, 0x70, 0x6, 0x2, 0x200, 0x20, 0x0, 0x4c60991c, 0x40, 0x3, 0x9, 0x80, 0xe9, 0x2, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffd, 0x20, 0x92ca, 0x6, 0xa1, 0x400, 0x6, 0x6, 0x2, 0x4, 0x7, 0xffffffffffffffff, 0x7ff, 0x7f, 0x2, 0x7, 0x7, 0x1, 0x1000, 0xfffffffffffff56d, 0x5, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x80, 0x2, 0x6, 0x6, 0x13f, 0x0, 0x100000001}, r5, 0x8, r6, 0x2) 17:36:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200420}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x6, 0xf, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x2}, [@typed={0xc, 0x91, @u64=0x9df}]}, 0x20}}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000540)="0adc1f123c123f3188b07058ed683badc7e331e8749052f9671923b9c686f9290862494be9800b1fcd09e4fa7a423c3d4d1ad655779a323ce9c08def74b562a1aa48cb2a865f89559e1fde9ad3dc6d75f8c3244f49387a86ec47001000009c9ffd99084f8260afada1a405020ebbbe7fb0d5374555b20fe0f0009d861ba279539a39fbe304d555d1b6ad431e8eb346534938130bee6245a8daf3d58c34a0d3e9f36e5b9fb35d74f8b94afe831be9099ecb239903e3ceb8b4f345b3f87c0fd028f66414e6db34ee88ad419a5cef04eb64eb1a7cdb447705c8516ad78d38163ae5c05842202d29e9ef8470d253109c12fa3f1f93e123793e3e") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000280)={0xfff, 0x22d2edc1, 0x0, 'queue1\x00', 0x1}) fgetxattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000100)=""/45, 0x2d) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000000a070000000000002"]}) 17:36:37 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:t'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 3464.153907][T24758] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3464.186418][T24765] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3464.273451][T24765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3464.303887][T24931] encrypted_key: keylen parameter is missing 17:36:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = dup2(r1, r0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x9, 0x2, 0xb6a9, 0xce35, 0x3}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r0) 17:36:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000002c0)={{0x33, @local, 0x4e24, 0x3, 'lc\x00', 0x2, 0x6, 0xa}, {@remote, 0x4e21, 0x0, 0x8001, 0x445, 0x2}}, 0x44) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000100)={[], 0x7, 0x0, 0x2, 0x0, 0x9, 0x2, 0x5000, [], 0x10001}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000340)=0x2d05, 0x4) [ 3464.332338][T24765] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3464.348559][T24931] encrypted_key: keylen parameter is missing [ 3464.370267][T24765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1d, 0x0, 0x0, 0x0, 0x4}}, 0x50) 17:36:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r0, 0x0, 0x36c) [ 3464.433128][T24983] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 17:36:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000040000000400", 0x4f, 0x1400}], 0x0, 0x0) [ 3464.478914][T24983] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3464.591849][T25000] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3464.600728][T25000] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3464.628023][T25000] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3464.656041][T25000] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) 17:36:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, 0x0) [ 3464.908157][T25208] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3464.926023][T25208] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3464.939718][T25208] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3464.948699][T25208] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x400, 0x0) bind$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x0, 0x2, 0x5, 0x9, 0x7ff, "3aeb2b01fb02d444f7a77c363df2406ca7cf77c7ed6bfd3e80813a0ee38146eae576afb3135b91278a91ede71836ed58e71c65bf5b19259c41e1f3f0312e38", 0x5}, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) select(0x40, &(0x7f0000000080)={0x80000001, 0xb0e, 0x1f, 0x6, 0xa8a, 0x8, 0x0, 0x2d}, &(0x7f0000000100)={0x1, 0x4, 0x1, 0x5, 0xa2f8, 0x1, 0x5, 0x7ff}, &(0x7f0000000140)={0x8001, 0x20000000, 0x7, 0xff, 0x2, 0x0, 0x4, 0x1}, &(0x7f0000000180)) 17:36:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r0, 0x0, 0x36c) 17:36:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, 0x0) [ 3465.228669][T25239] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3465.250346][T25244] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x17, r0, 0x2a) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) [ 3465.300695][T25244] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3465.327442][T25244] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) 17:36:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfffffffffffffffd, 0x1}, 0x50) [ 3465.348424][T25244] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000002, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) r3 = fcntl$getown(r1, 0x9) migrate_pages(r3, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x7) close(r1) 17:36:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000", 0x5c, 0x1400}], 0x0, 0x0) 17:36:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x1, 0xfff, 0x2}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(0x0, 0x0) [ 3465.664539][T25446] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3465.697509][T25446] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3465.697639][T25487] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3465.707167][T25446] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 3465.723688][T25446] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) 17:36:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) 17:36:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) [ 3466.005567][T25703] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3466.028802][T25703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3466.094156][T25703] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 3466.126569][T25703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ea], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:39 executing program 2: clone(0x1000000, &(0x7f00000000c0), 0x0, 0x0, 0xffffffffffffffff) 17:36:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0xc11, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000340)=""/23, &(0x7f0000000380)=0x17) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84204000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x844}, 0x20000080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x2, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) 17:36:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) [ 3466.431817][T25839] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3466.458334][T25839] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3466.496666][T25839] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(3) [ 3466.511567][T25839] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x1400}], 0x0, 0x0) 17:36:42 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") recvfrom(r1, &(0x7f0000000100)=""/135, 0x87, 0x10040, &(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0xdd60cf3bb4e59cca}, 0x4}}, 0xfffffffffffffe8f) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000032001901000000000000000047000000ffd38d9b0c0001000800100004000660"], 0x24}}, 0x0) 17:36:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000002c0)={0x8, 0x70474f56, 0x4bb9, 0x7, 0x2, @stepwise={{0x4, 0x3f}, {0x401, 0x10000}, {0x6, 0x6d}}}) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40940) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000200)={0xa619000000000000, 0x814, &(0x7f0000000080)="1b316d0616bd24cc569631cb117906da24f3b6f967d4d9ecab503f1625e599d79cc371601b6112d697bae662fb7df37b0d87b1740125ffc5de672dbbe5c0aad926974ac1bdc1c8bc363424e288609b31274bef5310d8b9266dba5540088f06a85cd380fe57f38558bfb98dbbee70dc73443a18c1ce99f6d4d0b4f68e0902ec5dcb5d35eaac11951d74c3a300717bf0a127104d9c64bee52c8beb0877019bba00ecba4a71ca3cd2c58106b550ef66f395d4037c78dc8aee21695b736bae01d5c53a48bd5a1a5d11a1bdcf55798768bd", &(0x7f0000000180)="e79985d943393c4305e46e0c70dff18132d6ee47d569fa0baea46a0b270f9e7219b1f6fb1691095d52e885983f1ac26a8eaad7a7840f13345f0565fb892ea7abac632355ff11899db07f1e6d435326625504745f40650b424956f44ae7197f531202a142bbf1b6a96a9716071dcebbb52a7b3f0abf", 0xcf, 0x75}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) sigaltstack(&(0x7f0000011000/0x1000)=nil, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r1) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000300)=0x1ff) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000240)) 17:36:42 executing program 2: clone(0x10000400, &(0x7f00000000c0), 0x0, &(0x7f0000000100), 0xffffffffffffffff) 17:36:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) [ 3468.697409][T25975] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000002740)=[{&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000540)=""/101, 0x65}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/89, 0x59}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}], 0xa, 0x0) sysfs$1(0x1, &(0x7f0000000080)='keyring#+\xb4\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="01145eb365b05dae58bffdc9c33a51758b3e7fdd0815f1d0157f936f0c0fe7943324fc4b079cc6999903ac55e5"], &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x4}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000032001901000000000000000002000000ffd30500000000000000100004000660"], 0x24}}, 0x0) [ 3468.762201][T25975] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000, 0x32, 0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f00000000c0)={0x3, 0x0, [0x4, 0x5, 0x6, 0x9, 0xb3a7e3a, 0x5, 0xa32f, 0x2]}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) [ 3468.814995][T25975] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(3) 17:36:42 executing program 2: r0 = gettid() rename(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) eventfd2(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) semget(0xffffffffffffffff, 0x8, 0x10) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x890, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 3468.882698][T25975] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) 17:36:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, 0x0) 17:36:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000100)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000032001901000000000000000002000000ff538d9b0c002e0007000000000000009936bbbdcb781aeb0f"], 0x24}}, 0x0) [ 3469.138495][T26298] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3469.149990][T26298] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x200, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={r3, 0x3ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, &(0x7f0000000140)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r6) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x30, 0x400, 0x9}, &(0x7f00000001c0)=0x18) close(r2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000280)={0x6, 0x1, 0x6, 0xff, '\x00', 0x10000}) 17:36:42 executing program 2: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73ca67775c5418889206e112d5c9dfba56e9136a3d0d056b00040ef732487b928b2271c1b13dd766b0553ef8ca6c7f9ffffffffffffff"], 0x39) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000000c0)=""/5) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 3469.200469][T26298] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 3469.225859][T26298] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, 0x0) 17:36:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x6, 0x2040) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x81, 0x200000000080000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x1, 0xe8c9, 0x5, 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getpgrp(0xffffffffffffffff) rt_sigqueueinfo(r3, 0x2, &(0x7f0000000100)={0x0, 0x800, 0x8}) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000003c0)=0x7fff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x109000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x804008}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x649}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x1b8a4163) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0xa00, 0x1) getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) [ 3469.525791][T26509] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3469.550995][T26542] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3469.572306][T26542] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3469.589308][T26542] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 3469.597368][T26542] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000040)={0xf, 0x3f, 0x7, 0x800}) close(r1) close(r1) 17:36:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a0081270100010000000000de0000d60291bd5d485ede832b4ce1e9c87e8b11e0cc4ecc9402f7b99437452b2d2712f98d669ca6361ba51bacf91b1092cd7d8552f4a44bfb9df80ec4c4848ea513c4cfd19ef495fbb6c5bd624f553dd1514a07c4f182dcb6deed4d1dda5c5a49820063f77a39a10cde0e1e26d3cc74d074df41399ce314e70a6a7b5ca5f05509d54c1cfdc908b3e80ee0f1fd43394460252d559abc5bf39667e6802ff3ac03694b8bc02ddb7b61b3a297c8ab2ec2255f557b51fe844204b3030b29cd106f154bdbda1ecfc7b54ed476a5468276076c2b1c419f"], 0x1}}, 0x0) 17:36:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x1400}], 0x0, 0x0) 17:36:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) fcntl$dupfd(r0, 0x406, r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x42, 0xb20, 0x70bd29, 0x25dfdbfb, {0x1}, [@typed={0x24, 0x6f, @str='}ppp1#lo*posix_acl_accesscpuset\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4004810) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000080)=0x97, 0x4) getsockname(r0, &(0x7f0000000200)=@can, &(0x7f0000000280)=0x80) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 17:36:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r1, 0xb) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) fcntl$setown(r1, 0x8, r6) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x8, 0x80000001, 0x2, 0x4, 0x49e8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r4) close(r3) [ 3469.944926][T26668] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3469.955972][T26672] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3469.991738][T26668] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3470.001987][T26668] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 3470.012069][T26668] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, 0x0) 17:36:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000100)="f88e11010001000000000089ba810c866b6e0ff34a4c438f431ba61af42218567dde0d7313d91805b61d79614c7fb36e23e1959b6b7c4db78c7a4e08127013d71e9803db072f2bb126740eb17fc3c6e14822e8c61477363671c74e1c402f447ab6") open$dir(&(0x7f0000000080)='./file0\x00', 0x180, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003200190100cb2e285000000004a7377fbcc7ed000000ffd38d9b0c0001000800"], 0x24}}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x101, 0x2000) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 17:36:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) [ 3470.248329][T26894] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3470.283638][T26894] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3470.325141][T26902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3470.330191][T26894] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 3470.365493][T26894] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3470.381749][T26902] openvswitch: netlink: Flow set message rejected, Key attribute missing. 17:36:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) recvmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/99, 0x63}], 0x3, &(0x7f00000002c0)=""/202, 0xca}, 0x120) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, 0x0) 17:36:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000040), 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet_int(r3, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 17:36:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f2], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000032001901a9ff00000000000002000000ffd38d9b0c0001000800100004000660"], 0x24}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40, 0x0) accept4$netrom(r2, &(0x7f0000000100)={{0x3, @default}, [@null, @remote, @netrom, @remote, @bcast, @null, @remote, @null]}, &(0x7f0000000180)=0x48, 0x800) 17:36:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:44 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) [ 3470.865379][T27131] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3470.893163][T27132] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xb82) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'syzkaller0\x00', 0x1019}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0xfffffffffffff801, @local, 0x7f}, @in6={0xa, 0x4e20, 0x1, @rand_addr="904b5d5e088b83867f91555a55139f87", 0x8}, @in={0x2, 0x4e23, @local}], 0x48) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/146, 0x92}], 0x5, &(0x7f0000000540)=""/59, 0x3b}, 0x8}], 0x1, 0x40012020, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x402000, 0x0) pwrite64(r1, &(0x7f0000000080)="84b0675bf790eb1f6530287e31538b96fa1c9d089722865963f25d2b98a6d2bdbe5ec0eaf6763b", 0x27, 0x54) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) close(r2) [ 3470.912098][T27132] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3470.928976][T27132] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 3470.940540][T27132] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x1400}], 0x0, 0x0) 17:36:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x0}) r4 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x8050, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x7c, 0x0, &(0x7f00000002c0)=[@enter_looper, @increfs_done={0x40106308, r3}, @request_death={0x400c630e, 0x0, 0x3}, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x40, 0x18, &(0x7f0000000240)=[@flat={0x776a2a85, 0xa, r4, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x1, 0x38}], &(0x7f0000000280)=[0x28, 0x38, 0x30]}, 0x1}}], 0x36, 0x0, &(0x7f0000000340)="b6fb9755a58c38d94cf3502beea8d84da1cbabc1c4a775225ac9a392d47f67b8195a7509cb0eca41714fd31c0a8528c579ca4ec50dfd"}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000032001901000000000000000002000000ffd38d9b0c0001000800100004000660211ec9e35c4ab1e6562255169a0412d4a0f02d0f45ad60fbc437581404c68517cc00f59634dd2a7afd5baf5350c12bc3f594d470958dbc035a54f9572ca50182c62b78fc99361bb36be3770edd1121be6e416b5d9ede631640ec6e1ce7bc4e"], 0x24}}, 0x0) [ 3471.166506][T27349] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3471.205711][T27349] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 17:36:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x6, 0x5, "9168661744d6"}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) 17:36:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 3471.274450][T27349] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 3471.297871][T27359] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3471.305187][T27349] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000640)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\x94r\x00\x00\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&N\x03\xb2K\xac\xe6x\x05\x98\xe5\x8b\xa5\f\x00\x81[K\xa6yfF\xfb\xceJ\xf2\xc0\x85\xc9l\vf\xcd\x97\xb9\xab\xb8\xa0A\f-\xd0\a&g') write$binfmt_elf64(r0, &(0x7f0000001a40)={{0x7f, 0x45, 0x4c, 0x46, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 17:36:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f6], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) 17:36:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x408200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0xfffffffffffffd6f) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400, 0x0) read$rfkill(r4, &(0x7f0000000100), 0x8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000140)=0x5, 0x4) close(r3) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) 17:36:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 17:36:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000003200190100000004000000000200fbc6f358a8a1a5da0192000400066086aa152484aeb39ad78149ba85426f553afb062f75bebe09363e8ef3a48f0ea732c3ca1975ecb09ae9d6ec9dc343e71e444140d583b9139ab4317277211d47c3c8379dbde1c2778900e2a02974de1bdb4353e17ab7b6f2777f896d3ae3bc952e8e80e86334600c53bec29119c47e9e5d43858ef4eaad"], 0x24}}, 0x0) [ 3471.877657][T27589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3471.909420][T27591] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:36:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x355c41) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) r2 = userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x9, 0x9, 0xdb6}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95)=0xfffffffffffffffe, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r3) 17:36:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 3471.923447][T27591] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3471.946620][T27591] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3471.956488][T27591] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) 17:36:45 executing program 2: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000280), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x18, 0x0, &(0x7f0000001000)) 17:36:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x1, 0x51, 0x3, 0xff, 0x7, 0x62, 0x7fffffff, 0x100, 0x400, 0x4, 0x2, 0x8, 0xf59, 0x8, 0xdc]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r2, 0x81, "9aaedbaa9b465a6945e87802fb47163496c01765bffbc44a2e5397f2d946f2bc9b13c345c40601fcb5acd0d0e5de928be551ac77df45fe4d20166863f9e116e2fb039892d066e5c8d4f2b4b4a3419b45ac44f12eb38b7b23a1c0270508f6f36fae068513522a8d2415501c8fd3326df38e3397ae870bf49b635e3eec3fcc5a54fc"}, &(0x7f0000000340)=0x89) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000032000901000000000000000002000000ffd38d9b0c0001000800100004000660"], 0x24}}, 0x0) 17:36:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 3472.221505][T27815] openvswitch: netlink: Tunnel attr 8198 out of range max 15 [ 3472.249926][T27816] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3472.269418][T27816] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3472.299250][T27816] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3472.349615][T27816] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f7], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) 17:36:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, 0x0) 17:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") socket$inet6(0xa, 0x2, 0xe67) socket$nl_generic(0x10, 0x3, 0x10) 17:36:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 17:36:46 executing program 2: r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 17:36:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 3472.953739][T28035] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3472.969987][T28035] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3472.978857][T28035] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3472.994313][T28035] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 17:36:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x401) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4f, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0x8001}, &(0x7f0000000140)=0x8) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r4) close(r3) 17:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000032001901004287873a47980000000000000002000000ffd38d9b0c0001000800"], 0x24}}, 0x0) 17:36:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x1000000e8) fcntl$setstatus(r2, 0x4, 0x46c00) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef555}]) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) 17:36:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:47 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x28) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x9, 0x11b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:36:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) sendto$inet6(r2, &(0x7f0000000040)="e209f86f9048d076b19becacfb0d561e498dd8752aba16e0701b1e1955a36e57f612b0ba1f7dabd62f5aad645ad292440cfb0496c0fb8284ccef67adba5a5a705e4496ebe5dcc0371664bac64adb1dec4ab18d3d04a16dbe7643b8679571ce964a38a4f636faa8ebb5b62d1a2ec945db6e7f0c84c883a3d9cecf67a5ac5fa1abc09473ca09aec172881c5c1da32f5a145dcb33741970e6d544c4e55ceb509fcd4dfffe34e1e0f6d3778d226fb9", 0xad, 0x1, 0x0, 0x0) 17:36:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000001c0)={0x8}) 17:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a6e2bbd29a3ca") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000100)=""/248, &(0x7f0000000200)=0xf8) 17:36:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) [ 3473.952441][T28490] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x24000, 0x22) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="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") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe71a, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) close(r2) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000080)=0x711, 0x4) 17:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r0, r2) connect$bt_rfcomm(r3, &(0x7f0000000140)={0x1f, {0x79, 0x3dae, 0x81, 0xffffffffffffff01, 0x6, 0x20}, 0x9d}, 0xa) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x8000, 0x0) 17:36:47 executing program 5: 17:36:47 executing program 5: 17:36:47 executing program 2: 17:36:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @multicast2}], 0xfffffffffffffd05) close(r2) close(r1) 17:36:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000320019010000000000000000020000ee00ffd38d9b0c0001000800100004000660"], 0x24}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x41, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7fff) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) dup2(r2, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x60bfcbb37c6e80d0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4f8659f1", @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = semget(0x3, 0x1, 0x80) semtimedop(r4, &(0x7f00000003c0)=[{0x0, 0xfff, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x800}], 0x3, &(0x7f0000000400)) 17:36:48 executing program 2: 17:36:48 executing program 5: 17:36:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000040)=""/202, &(0x7f0000000140)=0xca) 17:36:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:48 executing program 2: 17:36:48 executing program 5: [ 3474.784586][T28858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:36:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x10, &(0x7f0000000640)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2cd99db12a170f9}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}], [{@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0xec7641851bc5ed44, 0x77, 0x71, 0x75, 0x67, 0x62], 0x2d, [0x66, 0x73, 0x3f, 0x7b], 0x2d, [0x37, 0x67, 0x73, 0x73], 0x2d, [0x34, 0x31, 0x62, 0x75], 0x2d, [0x63, 0x75, 0x77, 0x36, 0x0, 0x34, 0x39, 0x77]}}}, {@obj_type={'obj_type'}}, {@fowner_lt={'fowner<', r6}}, {@uid_lt={'uid<', r7}}]}}) 17:36:48 executing program 5: 17:36:48 executing program 2: 17:36:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000180)=@caif, &(0x7f0000000080)=0x80) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0xf4, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x4, r2, 0xa}, 0x10) 17:36:48 executing program 5: 17:36:48 executing program 2: 17:36:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x4, 0xbc, 0x81, 0xdca, 0x100000000, 0x67, 0x1, 0x4}}) close(r2) sendto$rose(r3, &(0x7f0000000140)="ad9394389b1f947ed9", 0x9, 0x4001, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @default}, 0x1c) close(r1) 17:36:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:49 executing program 2: 17:36:49 executing program 5: 17:36:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000080)='wlan1\x00'}, 0x30) r2 = syz_open_dev$media(&(0x7f0000000900)='/dev/media#\x00', 0x7fffffff, 0x48000) write$P9_RCLUNK(r2, &(0x7f0000000940)={0x7, 0x79, 0x2}, 0x7) process_vm_readv(r1, &(0x7f0000000780)=[{&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000680)=""/197, 0xc5}], 0xa, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/108, 0x6c}], 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000980)=0x847) 17:36:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r0) close(r2) close(r1) 17:36:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:49 executing program 5: 17:36:49 executing program 2: 17:36:49 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x402000, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x80) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x3], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r3) close(r2) 17:36:49 executing program 5: 17:36:49 executing program 2: 17:36:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x2000, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6e0a000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x40810) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x22c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcec9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x23d8}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x404c000}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000003c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000300)={0x6, "5abe35990909eadd3930f0aaa9c8a5d2b0537e6cab33306e4079e6ca74da3b29", 0x2, 0x100, 0x1, 0x1ffffff, 0x2, 0x4}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x35e, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0xfc5a}}, 0x0) [ 3476.001729][T29268] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc03], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x4000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000100)={0x9, 0x1f, 0x6}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x28, r4}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) accept(r2, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80) mknod(&(0x7f0000000240)='./file0\x00', 0xc08, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r3) setitimer(0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) close(r3) 17:36:50 executing program 5: 17:36:50 executing program 2: 17:36:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/77, 0x4d}, {&(0x7f0000004040)=""/226, 0xe2}, {&(0x7f0000004140)=""/112, 0x70}], 0x4, &(0x7f0000004200)=""/46, 0x2e}, 0x4}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/74, 0x4a}], 0x4}}], 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000000000000000000004701000800100004002660000000000000000000007ba802f853ceff4f66e037e59207d1aa45acb7e5a2b3e3ae828b3a7594002ca73e783aa086b6af7c41f75cb2ce2b07d4"], 0x24}}, 0x0) 17:36:50 executing program 5: 17:36:50 executing program 2: 17:36:50 executing program 5: 17:36:50 executing program 2: 17:36:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x10000, 0x80200) ioctl$TIOCNOTTY(r1, 0x5422) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x1}}, 0x10) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x8000, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000100)={0x8, 0x0, 0x300e, 0x81, 0xb1, 0x60000000000000, 0xd570, 0x1}) 17:36:50 executing program 5: 17:36:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19}]}, 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 17:36:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x800007, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:36:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x28) write$P9_RSETATTR(r2, &(0x7f0000000380)={0x7}, 0x7) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x42, 0x12) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@loopback, @local, 0x0, 0x3, [@multicast1, @loopback, @multicast2]}, 0x1c) keyctl$join(0x1, &(0x7f00000005c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, 0x0, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 17:36:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x5, 0x7ff, 0x0, 0x1ff}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x4040040) bind$llc(r1, &(0x7f0000000280)={0x1a, 0x18, 0x0, 0x9, 0x9, 0xded3}, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x5) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) 17:36:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000040)=@bcast) close(r1) 17:36:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 17:36:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06670000000020000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000ddf773cd000000000000000000000000000000000000000000000000000000491ff6c8bd7ec16d000000000000000000000000000000040000000000000003"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3477.562791][T29630] openvswitch: netlink: Tunnel attr 8198 out of range max 15 17:36:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000005c0)=0x8007fff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}], 0x10) close(r2) close(r1) kexec_load(0x3aa5, 0x8, &(0x7f0000000480)=[{&(0x7f0000000040)="1c6235850a064dbdd70d1ffc28b00870ff27dc70e5fdbee1a36b3c64ebff18e6aa4b3a7df0c08962d0bcac648a79d7ccc69ab9f390cc7869dded163cad80901f97bff0fe4aeaeadf1d4808469d16fa2b187f2711ea17e4246007165845176cc7d1638cf5b297883850acaf775d153bfa3b82345c6e33a2d0cc55b16f40268858c7cab0f3465ec29656", 0x89, 0x7fffffff, 0x4}, {&(0x7f0000000100), 0x0, 0x1, 0xfffffffffffffff8}, {&(0x7f0000000140)="f8be52c17a24aaadea7ae16c80c18efde5d4eafce888dd5c272441ec143b37039c7968959fe880a2d0ddf09a8c1c40787512f4bcabf1c92b1262c47f1ec15a3eb2a48b0d52ac346f393f0c564b35f8bb5f2444c980a33322f826338f4799b98c8fe217ad02a7cb98563aa781af492ddf103484792deafa44a723394a", 0x7c, 0x8000, 0x9}, {&(0x7f00000001c0)="aad3bb8e3cb0e06bae8138303682ac3a26ff522bba058aa0b92c99b7ab615b98f9413fc6a78512710269feda6329a7e83a1b230fd48c96f3ea43006507e9815bfc1057f7f8d1af451451fe459f0fa39b9c68bb151cb539d7eb5a4b354ebeea2452514d7b0df2ba8d5cebd70be60606c771f5ae99cd41c32711078c7e3ffb9a97f7e28fd222cc166c8bf85e357b8c6ce7f30f50937750af885f21f76d63", 0x9d, 0x2, 0x80000000}, {&(0x7f0000000280)="a3f06eaf2f811dc2cadd6f343ec27c9c6a2a3ebec48a51c0441e3afb3845748afbc6ce9448d415a40a9fa951039ab9c39f8016039f017c8f1aca523706027778529a103e0d695c49e9e96634c65cde5fcdbf4e9448e9545800eb6c21be9d208f0727bafc1428c5e7f19b6f22a23f4dc6088a280124d803ab9d0542060653cf08102f045e513394835da1fb2c9018bec0410bfa5f5158f0aa1b4aec457193b2cbe66ba16cd5", 0xa5, 0x9a, 0x4}, {&(0x7f0000000340)="f103991c72692e55cf0f45064f5537384b8b6b6bb572e90d6c0c3ca4783b091f142ca41cc29d0d2dc0df2cdb0c366794949740b104beb4f25e177faef5c3490ae5f3e98122ed4ad2c7d3bee32b30ed4c1ed3cbcad3a54949d08f2c8b8cadfc5d7bc7ad86aaf956df9533a4ca45196c23ae319eeb84d535b3ddb7f4f697350420717c7ec3b58125cc2ea736d784b5ac285d722bc34368a3560255d37f6a0d173b1bb20feb5af7d5062adeaad8509a0abe8979a6abadd376c145abd4", 0xbb, 0x400, 0x1}, {&(0x7f0000000400)="942b82c7831647acbe4af94b0b92f337bece96e96b7c0ab7fb9db58cda1532a6cedb3dc49d38ed", 0x27, 0xfe00000000000, 0x7}, {&(0x7f0000000440)="60419450097f543071f65212e171f107a7593d", 0x13, 0x0, 0x2}], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) [ 3477.664355][T28494] ================================================================== [ 3477.673091][T28494] BUG: KASAN: use-after-free in debugfs_remove+0x10d/0x130 [ 3477.680286][T28494] Read of size 8 at addr ffff88804270fe00 by task kworker/0:1/28494 [ 3477.688260][T28494] [ 3477.690604][T28494] CPU: 0 PID: 28494 Comm: kworker/0:1 Not tainted 5.1.0-rc1 #28 [ 3477.698223][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3477.708357][T28494] Workqueue: events __blk_release_queue [ 3477.713891][T28494] Call Trace: [ 3477.717189][T28494] dump_stack+0x172/0x1f0 [ 3477.721516][T28494] ? debugfs_remove+0x10d/0x130 [ 3477.721558][T28494] print_address_description.cold+0x7c/0x20d [ 3477.721570][T28494] ? debugfs_remove+0x10d/0x130 [ 3477.721582][T28494] ? debugfs_remove+0x10d/0x130 [ 3477.721593][T28494] kasan_report.cold+0x1b/0x40 [ 3477.721610][T28494] ? kobject_del+0x20/0x30 [ 3477.721626][T28494] ? debugfs_remove+0x10d/0x130 [ 3477.756048][T28494] __asan_report_load8_noabort+0x14/0x20 [ 3477.761665][T28494] debugfs_remove+0x10d/0x130 [ 3477.766324][T28494] blk_trace_free+0x38/0x140 [ 3477.770892][T28494] __blk_trace_remove+0x78/0xa0 [ 3477.775722][T28494] blk_trace_shutdown+0x67/0x90 [ 3477.780557][T28494] __blk_release_queue+0x1dc/0x3a0 [ 3477.785653][T28494] process_one_work+0x98e/0x1790 [ 3477.790574][T28494] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3477.795922][T28494] ? lock_acquire+0x16f/0x3f0 [ 3477.800585][T28494] worker_thread+0x98/0xe40 [ 3477.805072][T28494] kthread+0x357/0x430 [ 3477.809121][T28494] ? process_one_work+0x1790/0x1790 [ 3477.814312][T28494] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3477.820543][T28494] ret_from_fork+0x3a/0x50 [ 3477.824941][T28494] [ 3477.827245][T28494] Allocated by task 28133: [ 3477.831645][T28494] save_stack+0x45/0xd0 [ 3477.835782][T28494] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 3477.841388][T28494] kasan_slab_alloc+0xf/0x20 [ 3477.845952][T28494] kmem_cache_alloc+0x11a/0x6f0 [ 3477.850781][T28494] __d_alloc+0x2e/0x8c0 [ 3477.854921][T28494] d_alloc+0x4d/0x2b0 [ 3477.858879][T28494] d_alloc_parallel+0xf4/0x1bc0 [ 3477.863703][T28494] __lookup_slow+0x1ab/0x500 [ 3477.868269][T28494] lookup_one_len+0x16d/0x1a0 [ 3477.872932][T28494] start_creating+0xbf/0x1e0 [ 3477.877500][T28494] __debugfs_create_file+0x65/0x400 [ 3477.882674][T28494] debugfs_create_file+0x5a/0x70 [ 3477.887586][T28494] do_blk_trace_setup+0x376/0xb90 [ 3477.892599][T28494] __blk_trace_setup+0xe3/0x190 [ 3477.897429][T28494] blk_trace_ioctl+0x170/0x300 [ 3477.902216][T28494] blkdev_ioctl+0x12c/0x1c40 [ 3477.906786][T28494] block_ioctl+0xee/0x130 [ 3477.911093][T28494] do_vfs_ioctl+0xd6e/0x1390 [ 3477.915656][T28494] ksys_ioctl+0xab/0xd0 [ 3477.919786][T28494] __x64_sys_ioctl+0x73/0xb0 [ 3477.924352][T28494] do_syscall_64+0x103/0x610 [ 3477.928918][T28494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3477.934777][T28494] [ 3477.937079][T28494] Freed by task 28133: [ 3477.941125][T28494] save_stack+0x45/0xd0 [ 3477.945257][T28494] __kasan_slab_free+0x102/0x150 [ 3477.950178][T28494] kasan_slab_free+0xe/0x10 [ 3477.954660][T28494] kmem_cache_free+0x86/0x260 [ 3477.959316][T28494] __d_free+0x20/0x30 [ 3477.963284][T28494] rcu_core+0x928/0x1390 [ 3477.967512][T28494] __do_softirq+0x266/0x95a [ 3477.971991][T28494] [ 3477.974303][T28494] The buggy address belongs to the object at ffff88804270fdc0 [ 3477.974303][T28494] which belongs to the cache dentry(17:syz0) of size 288 [ 3477.988678][T28494] The buggy address is located 64 bytes inside of [ 3477.988678][T28494] 288-byte region [ffff88804270fdc0, ffff88804270fee0) [ 3478.001833][T28494] The buggy address belongs to the page: [ 3478.007441][T28494] page:ffffea000109c3c0 count:1 mapcount:0 mapping:ffff88809b396180 index:0x0 [ 3478.016259][T28494] flags: 0x1fffc0000000200(slab) [ 3478.021184][T28494] raw: 01fffc0000000200 ffffea000213df08 ffffea00010fa688 ffff88809b396180 [ 3478.029746][T28494] raw: 0000000000000000 ffff88804270f000 000000010000000b ffff8880607dc7c0 [ 3478.038299][T28494] page dumped because: kasan: bad access detected [ 3478.044684][T28494] page->mem_cgroup:ffff8880607dc7c0 [ 3478.049850][T28494] [ 3478.052154][T28494] Memory state around the buggy address: [ 3478.057761][T28494] ffff88804270fd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3478.065796][T28494] ffff88804270fd80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3478.073830][T28494] >ffff88804270fe00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3478.081861][T28494] ^ [ 3478.085917][T28494] ffff88804270fe80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 3478.093951][T28494] ffff88804270ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3478.101982][T28494] ================================================================== [ 3478.110017][T28494] Disabling lock debugging due to kernel taint [ 3478.122354][T28494] Kernel panic - not syncing: panic_on_warn set ... [ 3478.128492][ T3876] kobject: 'loop3' (000000003a66d6f1): kobject_uevent_env [ 3478.128950][T28494] CPU: 0 PID: 28494 Comm: kworker/0:1 Tainted: G B 5.1.0-rc1 #28 [ 3478.128957][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3478.128976][T28494] Workqueue: events __blk_release_queue [ 3478.146414][ T3876] kobject: 'loop3' (000000003a66d6f1): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:36:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)="e020a6ddbf16676b7c87d5", 0xb, r0}, 0x68) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa00}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000660}]}]}, 0x24}}, 0x0) [ 3478.155161][T28494] Call Trace: [ 3478.155182][T28494] dump_stack+0x172/0x1f0 [ 3478.155198][T28494] panic+0x2cb/0x65c [ 3478.155212][T28494] ? __warn_printk+0xf3/0xf3 [ 3478.155226][T28494] ? debugfs_remove+0x10d/0x130 [ 3478.155239][T28494] ? preempt_schedule+0x4b/0x60 [ 3478.155261][T28494] ? ___preempt_schedule+0x16/0x18 [ 3478.155276][T28494] ? trace_hardirqs_on+0x5e/0x230 [ 3478.155290][T28494] ? debugfs_remove+0x10d/0x130 [ 3478.155307][T28494] end_report+0x47/0x4f [ 3478.189994][ T3876] kobject: 'loop5' (0000000078e86e56): kobject_uevent_env [ 3478.191794][T28494] ? debugfs_remove+0x10d/0x130 [ 3478.191806][T28494] kasan_report.cold+0xe/0x40 [ 3478.191823][T28494] ? kobject_del+0x20/0x30 [ 3478.191835][T28494] ? debugfs_remove+0x10d/0x130 [ 3478.191850][T28494] __asan_report_load8_noabort+0x14/0x20 [ 3478.191862][T28494] debugfs_remove+0x10d/0x130 [ 3478.191874][T28494] blk_trace_free+0x38/0x140 [ 3478.191890][T28494] __blk_trace_remove+0x78/0xa0 [ 3478.199153][ T3876] kobject: 'loop5' (0000000078e86e56): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 3478.201808][T28494] blk_trace_shutdown+0x67/0x90 [ 3478.201825][T28494] __blk_release_queue+0x1dc/0x3a0 [ 3478.201842][T28494] process_one_work+0x98e/0x1790 [ 3478.201860][T28494] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3478.201872][T28494] ? lock_acquire+0x16f/0x3f0 [ 3478.201891][T28494] worker_thread+0x98/0xe40 [ 3478.201909][T28494] kthread+0x357/0x430 [ 3478.223156][ T3876] kobject: 'loop1' (00000000fd9b385f): kobject_uevent_env [ 3478.227782][T28494] ? process_one_work+0x1790/0x1790 [ 3478.227796][T28494] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3478.227810][T28494] ret_from_fork+0x3a/0x50 [ 3478.233483][T28494] Kernel Offset: disabled [ 3478.332894][T28494] Rebooting in 86400 seconds..