PVS: ftp: loaded support on port[0] = 21 [ 288.252201][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 288.506486][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.513816][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.522950][ T8484] device bridge_slave_0 entered promiscuous mode [ 288.536540][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.543820][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.552892][ T8484] device bridge_slave_1 entered promiscuous mode [ 288.601030][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.615654][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.662096][ T8484] team0: Port device team_slave_0 added [ 288.674528][ T8484] team0: Port device team_slave_1 added [ 288.718569][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.725760][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.751950][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.765270][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.772309][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.798867][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.932225][ T8484] device hsr_slave_0 entered promiscuous mode [ 288.995003][ T8484] device hsr_slave_1 entered promiscuous mode [ 289.336409][ T8484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.451109][ T8484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.570803][ T8484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.610660][ T8484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.866846][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.901186][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.910602][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.940906][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.968322][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.978080][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.987553][ T3239] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.994794][ T3239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.055063][ T8484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.066002][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.082256][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.091718][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.101278][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.110446][ T3239] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.117692][ T3239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.126505][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.137106][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.147766][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.157751][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.167846][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.178009][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.188157][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.197731][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.207755][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.217227][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.233624][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.243040][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.280224][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.288316][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.307866][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.389162][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.399271][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.438427][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.447892][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.466001][ T8484] device veth0_vlan entered promiscuous mode [ 290.485336][ T8484] device veth1_vlan entered promiscuous mode [ 290.497762][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.506763][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.515776][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.560711][ T8484] device veth0_macvtap entered promiscuous mode [ 290.570968][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.581072][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.590804][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.607126][ T8484] device veth1_macvtap entered promiscuous mode [ 290.638663][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.646724][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.656296][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.665511][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.675682][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.694251][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.737516][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.747448][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:12:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1c) 01:12:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1c) 01:12:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1c) 01:12:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000400000008000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) [ 291.330287][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.351278][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:12:36 executing program 0: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x2, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x38, 0x0, 0x0, 0x0) 01:12:37 executing program 0: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x2, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x38, 0x0, 0x0, 0x0) 01:12:37 executing program 0: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x2, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x38, 0x0, 0x0, 0x0) 01:12:37 executing program 0: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x2, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x38, 0x0, 0x0, 0x0) 01:12:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff0100000000000000000000000000050000000100000000000000000000000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) 01:12:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff0100000000000000000000000000050000000100000000000000000000000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) 01:12:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff0100000000000000000000000000050000000100000000000000000000000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) 01:12:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001ace000000000000000ff0100000000000000000000000000050000000100000000000000000000000000000000000100000a"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) 01:12:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070007053c27bc33", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:12:39 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 294.277198][ T8734] IPVS: ftp: loaded support on port[0] = 21 [ 294.530939][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 294.720369][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.727728][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.737078][ T8734] device bridge_slave_0 entered promiscuous mode [ 294.748073][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.755453][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.764704][ T8734] device bridge_slave_1 entered promiscuous mode [ 294.810788][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.848014][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.892933][ T8734] team0: Port device team_slave_0 added [ 294.903661][ T8734] team0: Port device team_slave_1 added [ 294.943734][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.950793][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.977735][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.991815][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.999040][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.025156][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.138751][ T8734] device hsr_slave_0 entered promiscuous mode [ 295.188607][ T8734] device hsr_slave_1 entered promiscuous mode [ 295.223663][ T8734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.231355][ T8734] Cannot create hsr debugfs directory [ 295.491140][ T8734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.560130][ T8734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.615471][ T8734] netdevsim netdevsim1 netdevsim2: renamed from eth2 01:12:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070007053c27bc33", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 295.675182][ T8734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.950894][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.983043][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.991740][ T3239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.007910][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.042964][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.052883][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.062440][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.069766][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.132202][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.141610][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.151393][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.160588][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.167902][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.176965][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.187604][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.198306][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.208530][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.218701][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.228820][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.238855][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.248200][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.257592][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.267092][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.283032][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.291962][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.341083][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.348857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.377553][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.416185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.426110][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.468628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.478096][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.497397][ T8734] device veth0_vlan entered promiscuous mode [ 296.515995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.525232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.537807][ T8734] device veth1_vlan entered promiscuous mode [ 296.600115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.610196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.628031][ T8734] device veth0_macvtap entered promiscuous mode [ 296.647667][ T8734] device veth1_macvtap entered promiscuous mode [ 296.682773][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.693774][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.707203][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.715205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.724725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.734106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.744083][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.762659][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 296.774314][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.787682][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.801374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.811995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:12:42 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 01:12:42 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 01:12:42 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 01:12:43 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000840), 0xb}, 0x800, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c2) open(0x0, 0x44200, 0x1e4) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x850) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000006c0)={0x7c, 0x7d, 0x2, {{0x0, 0x5d, 0x1, 0x1000, {0x80, 0x3, 0x7}, 0x90830000, 0x211, 0x6, 0x7a25, 0x9, '/dev/sg#\x00', 0x9, '/dev/sg#\x00', 0x15, '/dev/bus/usb/00#/00#\x00', 0x3, '${^'}, 0xa, '[@+$\x95,\'\\]^', 0x0, 0x0, r3}}, 0x7c) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0x67, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e2547cff064f38000000000000000000", @ANYRES16=r2, @ANYBLOB="000a26bd7000fedbdf250d00007ff338d2cfcb000800bfc49e030000ff0028", @ANYRES32=0x0, @ANYBLOB="e0f0fdcb69a067053b14d7a44ca9ff6dedc9d15f7745c5298ff283c1edd156d0beaa2059b57c0366b4ef51f4f58652ef0dbdde68cd9d7f6a7ddbcbe278a8c7269503bfe6467dd6c6586d913cda836caa174be4b24508d143721ac2ce061bdf94fef5a7db2f89c65a9f62833a1acd106871bc4932d16942676621459c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf251f00000005009200e00000000c0022800800020080000000fd919200010000000800010004000000"], 0x38}}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b30d4c18759e108b29527b0cce6a1f085ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a8df3618e18c6a994b6d6e03cda01f573af6c3704906f31fa93128e7da3c2cdbe6b8becf4582374891228fa702f60514b3992d5373036825bb0807b8590317abdf4bb78a41afb500b1d41d192ac89c03cd96194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b0194497600", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000090) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r4, 0x0) [ 297.870696][ C1] sd 0:0:1:0: [sg0] tag#1714 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 297.881306][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB: Test Unit Ready [ 297.888078][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.897930][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.907771][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.917558][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.927337][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.937117][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.946926][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.956721][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.966556][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.976410][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.986216][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 297.993906][ C0] hrtimer: interrupt took 107692 ns [ 297.995996][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.010889][ C1] sd 0:0:1:0: [sg0] tag#1714 CDB[c0]: 00 00 00 00 00 00 00 00 [ 298.631261][ C1] sd 0:0:1:0: [sg0] tag#1715 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 298.641961][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB: Test Unit Ready [ 298.648684][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.658477][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.668275][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.678083][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.687881][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.698366][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.708160][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.717957][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.727801][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.737598][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.747391][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.757192][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 298.766989][ C1] sd 0:0:1:0: [sg0] tag#1715 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070007053c27bc33", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:12:45 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000001f80)="40b6df0436eb6f67273407d815827e5567e0f0d44f482682f559b75109e1f0dcb64eb81564f58db3a0ea3aa9f361fb0941cccd9e99ff9d275b6b1f7f0f300d7363f1ae125569f7f158b3e9915eb8c5d35c67b073cba8a8ac6bacadd579f59d6908bb5ad63ba296527807b3749785a9258c6bdb0dc8bd46eafa36aae29a9a93", 0x7f}], 0x1}}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x80000000000d, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 01:12:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r3, 0x10000000) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES64, @ANYRES32=r6], 0x3c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000280)=0x2, 0x4) 01:12:45 executing program 1: socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f0000000200), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x10000, 0x4) 01:12:45 executing program 1: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1c8c83, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000140)={0x0, 0xfffffffe, 0xd60, [], &(0x7f0000000100)=0x20}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000500)={0x14014000, &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000002c0), {0x13}, &(0x7f0000000300)=""/25, 0x19, &(0x7f0000000340)=""/155, &(0x7f0000000400)=[0x0], 0x1, {r2}}, 0x58) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3}) [ 300.420637][ C0] sd 0:0:1:0: [sg0] tag#1716 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 300.431302][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB: Test Unit Ready [ 300.438064][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.447946][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.457836][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.467674][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.477515][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.487340][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.497166][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.506995][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.516822][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.526626][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.526732][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.526840][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.526955][ C0] sd 0:0:1:0: [sg0] tag#1716 CDB[c0]: 00 00 00 00 00 00 00 00 [ 300.682945][ C1] sd 0:0:1:0: [sg0] tag#1717 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 300.693624][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB: Test Unit Ready [ 300.700235][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.710102][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.719977][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.729837][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.739685][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.749484][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.759250][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.759366][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.778704][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.788484][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.798261][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.808038][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 300.817799][ C1] sd 0:0:1:0: [sg0] tag#1717 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:46 executing program 1: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x2fe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1c8c83, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000140)={0x0, 0xfffffffe, 0xd60, [], &(0x7f0000000100)=0x20}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone3(&(0x7f0000000500)={0x14014000, &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000002c0), {0x13}, &(0x7f0000000300)=""/25, 0x19, &(0x7f0000000340)=""/155, &(0x7f0000000400)=[0x0], 0x1, {r2}}, 0x58) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3}) [ 301.174075][ C0] sd 0:0:1:0: [sg0] tag#1718 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 301.184898][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB: Test Unit Ready [ 301.191531][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.201391][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.211461][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.221282][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.231106][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.241014][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.250832][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.260647][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.270453][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.280322][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.290144][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.299940][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 301.309753][ C0] sd 0:0:1:0: [sg0] tag#1718 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:47 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x6710, 0x4, 0x0, 0xc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x511101, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0xfbff, 0xeff5a947, 0x1, 0x2, 0x7, r2}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, "820f1bfddf18ce2c2310f4053ace890bb3a04c"}) ioctl$KDDISABIO(r0, 0x4b37) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002300466faeb8fc999a670005040000000540aef0f1000000"], 0x1c}, 0x1, 0x60}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0xff, 0x8, 0x400, 0x1, 0x0, "82ddd6811343fab52c1b94d19db7a28baaf5e8"}) 01:12:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070007053c27bc33", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 01:12:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) r3 = socket(0x1a, 0x3, 0x101) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000000c0), 0x4) write$nbd(r2, &(0x7f0000000040)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a3ef07749fa55f62d3adff7f9d5e82099cba335a2fdbede515d1978b97fffeffffb13bedfb1f8cd563af872a0a18ecf6449fe66884b33c61b3927917b2d8ef665ad9b19f55dd7d020a724232a8b58e9eb39b4667c5e7bef3"}, 0x68) [ 302.318835][ T9010] dlm: no locking on control device 01:12:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) 01:12:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000040)={0x10000}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x6ca9, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x4000}, 0x40) r6 = dup2(r1, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1f}}], 0x30}}], 0x1, 0x0) 01:12:48 executing program 1: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000580)) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x1140, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x259) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x31, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64], 0xe4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x6) [ 302.802533][ C0] sd 0:0:1:0: [sg0] tag#1719 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 302.813260][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB: Test Unit Ready [ 302.820063][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.829901][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.839721][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.849563][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.859391][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.869227][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.879049][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.888945][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.889435][ T9023] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 302.898753][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.898857][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.898980][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.944258][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.954078][ C0] sd 0:0:1:0: [sg0] tag#1719 CDB[c0]: 00 00 00 00 00 00 00 00 [ 303.109334][ T9029] IPVS: ftp: loaded support on port[0] = 21 [ 303.255814][ C0] sd 0:0:1:0: [sg0] tag#1720 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 303.266462][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB: Test Unit Ready [ 303.273070][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.282959][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.292854][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.302736][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.312616][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.322455][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.332307][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.342158][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.352009][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.361864][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.371781][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.381637][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.391458][ C0] sd 0:0:1:0: [sg0] tag#1720 CDB[c0]: 00 00 00 00 00 00 00 00 [ 303.442750][ T9025] IPVS: ftp: loaded support on port[0] = 21 [ 303.502315][ T7] tipc: TX() has been purged, node left! 01:12:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 01:12:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fcbca742200765020000000000000080812d274014ae40b8ae"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x0, 0x80000001, &(0x7f0000000040)}) socket(0x10, 0x3, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$P9_RLERROR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000008000000060024272a9b5e25"], 0xf) [ 304.112861][ C0] sd 0:0:1:0: [sg0] tag#1721 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 304.124538][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB: Test Unit Ready [ 304.131163][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.141086][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.150917][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.160791][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.170053][ T32] audit: type=1800 audit(1595034769.631:2): pid=9084 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 [ 304.170602][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.198923][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.208855][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.218715][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.228918][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.238767][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.248704][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.258541][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.268412][ C0] sd 0:0:1:0: [sg0] tag#1721 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fcbca742200765020000000000000080812d274014ae40b8ae"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x0, 0x80000001, &(0x7f0000000040)}) socket(0x10, 0x3, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$P9_RLERROR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000008000000060024272a9b5e25"], 0xf) [ 304.714948][ C0] sd 0:0:1:0: [sg0] tag#1679 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 304.725598][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB: Test Unit Ready [ 304.732229][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.742120][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.751989][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.761853][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.771734][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.781763][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.791624][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.801477][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.811338][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.821195][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.831061][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.840910][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 304.850754][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[c0]: 00 00 00 00 00 00 00 00 [ 304.864163][ T32] audit: type=1800 audit(1595034770.321:3): pid=9092 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 01:12:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fcbca742200765020000000000000080812d274014ae40b8ae"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x0, 0x80000001, &(0x7f0000000040)}) socket(0x10, 0x3, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$P9_RLERROR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000008000000060024272a9b5e25"], 0xf) [ 305.300599][ C0] sd 0:0:1:0: [sg0] tag#1680 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 305.311251][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB: Test Unit Ready [ 305.317984][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.327831][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.337672][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.347613][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.357493][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.367484][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.377355][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.387253][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.397142][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.407083][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.416960][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.426841][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.436712][ C0] sd 0:0:1:0: [sg0] tag#1680 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fcbca742200765020000000000000080812d274014ae40b8ae"], 0x99) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x4, 0x1}}, 0x0, 0x80000001, &(0x7f0000000040)}) socket(0x10, 0x3, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$P9_RLERROR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000008000000060024272a9b5e25"], 0xf) [ 305.474157][ T32] audit: type=1800 audit(1595034770.931:4): pid=9102 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 [ 305.585059][ C0] sd 0:0:1:0: [sg0] tag#1691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 305.595838][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB: Test Unit Ready [ 305.602463][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.612342][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.622234][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.632169][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.642060][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.651946][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.661830][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.671715][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.681580][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.691465][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.701347][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.711227][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 305.721107][ C0] sd 0:0:1:0: [sg0] tag#1691 CDB[c0]: 00 00 00 00 00 00 00 00 [ 305.745237][ T32] audit: type=1800 audit(1595034771.211:5): pid=9108 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15728 res=0 01:12:51 executing program 1: listen(0xffffffffffffffff, 0x800000000000401) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x79e9, 0x0, 0x4, 0x40000000, 0x0, {0x77359400}, {0x3, 0x0, 0x0, 0x6a, 0x40, 0x6, "63122a3c"}, 0x0, 0x4, @userptr, 0x0, 0x0, r0}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000abaff9)={0x77359400}, 0x8) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000001c0)={0x8, 'syzkaller0\x00', {'geneve1\x00'}, 0xfa4}) close(r1) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xd}]) io_pgetevents(r3, 0x80, 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000100)={[0x2]}, 0x8}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 01:12:51 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002e37eae0715455ed5da3405175dfa32d09f884f376c5366795846e345d5e42c7b9a68e800da4c8ae2ed29a333760a6a00c5e9b2a1565d79bbb2f5540f3b82f6b23ae26a56d01282429b7d953a18edc5c0deef05eed2f2391da1b709c2f281c910a8fbf93ee5088581eaf153862a29fb"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f00000000c0)={0x6, 0x1, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x100}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 306.061509][ T9117] IPVS: ftp: loaded support on port[0] = 21 [ 306.260371][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.360576][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.400611][ T9140] IPVS: ftp: loaded support on port[0] = 21 01:12:51 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) personality(0x400000) io_setup(0x4, &(0x7f00000004c0)) [ 306.445298][ T7] tipc: TX() has been purged, node left! 01:12:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c02e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x42}], 0x1, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) pipe(&(0x7f00000002c0)) pipe(&(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) semtimedop(0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:12:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000103ffdf00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006002700f0000000"], 0x3c}}, 0x0) dup2(0xffffffffffffffff, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_dccp(0xa, 0x6, 0x0) write$snddsp(r3, &(0x7f0000000000)="a2b57e0fd8f26f8c0715274a8bc43049aa0ce698034d9ce5db8838585f4d5a0c69a2c7a3d7631f8c07d364e9e9091c25f7be54c81f27700cf2110176", 0x3c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r5) socket(0x22, 0x2, 0x1) splice(r4, 0x0, r5, 0x0, 0x100000002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x28, 0x4, 0x10, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4}, 0x40) r8 = dup2(r6, r7) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x7, {0xcc9, 0x5}, {0x8}, @const={0x3, {0x9, 0x1, 0x5, 0x1000}}}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) symlinkat(&(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') 01:12:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:12:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x402000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getaddr={0x4c, 0x16, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x1f, 0x40, 0xfe, r3}, [@IFA_FLAGS={0x8, 0x8, 0x321}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9, 0x7, 0x6}}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 01:12:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) [ 307.140053][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.202806][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:12:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) readahead(r3, 0x0, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/self/net/pfkey\x00', 0x301880, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}}, 0x0) pidfd_getfd(r2, r4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xb}, {0x0, [0x5f, 0x0, 0x30, 0x5f, 0x2e, 0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000001740)=""/15, 0x23, 0xf}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000006f04000002fd002000200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, [], 0x0, 0x1c, r5, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100008}, 0x10}, 0x78) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvmsg$can_bcm(r8, &(0x7f0000001680)={&(0x7f0000000040)=@tipc=@name, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/98, 0x62}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/134, 0x86}, {&(0x7f0000001540)=""/55, 0x37}], 0x9, &(0x7f0000001640)=""/52, 0x34}, 0x10100) 01:12:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:12:53 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in6=@local}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x200, 0xfffffff8, 0x4, 0xffffffc0, 0x12, "c7bc681d446eae24b9124061940b2f2f9143ab"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r5, &(0x7f0000000180), 0xf1, 0x0) 01:12:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:12:53 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177b9f70000000000000000000000000000000000000000000000000000000200000003000000880400000000000098000000000000009800000500000000f0030000f0030000f0030000f0030000f00300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000070000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e6400000065716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001003580300000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000269705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000fcffffff0e0000600000000000000000000000005001686173686c696d697400000001000000000000000000000000000000000276657468305f746f5f7b737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000006e00000000000000000000000900000008000000000000000000000000000000480054454500000000000000000000ba60eabc545ffd22000000000000000001ac1414bb0000000000000000000000007465716c3000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1081}, [@IFLA_LINKINFO={0x69, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000540)={@rand_addr, @local, 0x0}, &(0x7f0000000580)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2ffb, 0x4}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x0) 01:12:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2d80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cdc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b22249"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 308.116562][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:12:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a00000029000000ffffde0000000000040000000000ab445e18579da662053b79d29d160000ff07000000000000ff0700"], 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x7, {0xccaf, 0x0, 0x3, 0x6}}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000540)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 01:12:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 308.550861][ C0] sd 0:0:1:0: [sg0] tag#1707 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 308.561509][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB: Test Unit Ready [ 308.568229][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.578055][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.587887][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.597767][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.607600][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.617455][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.627253][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.637099][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.646955][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.656841][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.666720][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.676575][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 308.686458][ C0] sd 0:0:1:0: [sg0] tag#1707 CDB[c0]: 00 00 00 00 00 00 00 00 [ 308.711122][ T32] audit: type=1800 audit(1595034774.171:6): pid=9232 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 01:12:54 executing program 2: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)=0x1) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000200)=0x730) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1, 0x3ff, 0x1}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10005}, 0x5000) r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x80, 0x280901) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x52b6eb9b}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000440)={r5, 0x1ff, 0x800, 0xff}, &(0x7f0000000480)=0x10) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) r6 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x7f, 0x2f, 0x54, 0xba, 0x0, 0x300000000000, 0xa2102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x62c4, 0x0, @perf_config_ext={0x83b}, 0x40000, 0x8, 0x40000, 0x0, 0x0, 0x2, 0x775}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x3) ioctl$FIONCLEX(r6, 0x5450) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x8) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}}, 0x4000000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x5) [ 308.887209][ T32] audit: type=1800 audit(1595034774.351:7): pid=9240 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15734 res=0 01:12:54 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2d80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cdc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b22249"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 309.036448][ C0] sd 0:0:1:0: [sg0] tag#1726 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 309.047107][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB: Test Unit Ready [ 309.053878][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.063738][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.073596][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.083347][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.093194][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.103033][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.112873][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.122725][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:12:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a00000029000000ffffde0000000000040000000000ab445e18579da662053b79d29d160000ff07000000000000ff0700"], 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x7, {0xccaf, 0x0, 0x3, 0x6}}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000540)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 309.132614][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.142522][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.152406][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.162293][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.172156][ C0] sd 0:0:1:0: [sg0] tag#1726 CDB[c0]: 00 00 00 00 00 00 00 00 [ 309.382625][ T9247] IPVS: ftp: loaded support on port[0] = 21 [ 309.405822][ C0] sd 0:0:1:0: [sg0] tag#1678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 309.416503][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB: Test Unit Ready [ 309.423136][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.433048][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.442901][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.452804][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.462655][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.472494][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.482334][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.492182][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.502045][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.511881][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.521719][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.531562][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.542387][ C0] sd 0:0:1:0: [sg0] tag#1678 CDB[c0]: 00 00 00 00 00 00 00 00 [ 309.569344][ T32] audit: type=1800 audit(1595034775.031:8): pid=9248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 01:12:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(0xffffffffffffffff, r4) 01:12:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a00000029000000ffffde0000000000040000000000ab445e18579da662053b79d29d160000ff07000000000000ff0700"], 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560040000049d2e181baf9459c5c953148c6801d2c0945ed694a4cc08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f4c88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bc9b27622cd9f9d"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x7, {0xccaf, 0x0, 0x3, 0x6}}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000540)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 309.963924][ C1] sd 0:0:1:0: [sg0] tag#1692 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 309.974583][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB: Test Unit Ready [ 309.981195][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 309.991064][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.000881][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.010736][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.020550][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.030348][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.040161][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.049964][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.059771][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.069554][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.079359][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.089142][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.098924][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(0xffffffffffffffff, r4) [ 310.143309][ T32] audit: type=1800 audit(1595034775.601:9): pid=9276 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 [ 310.334209][ T9247] chnl_net:caif_netlink_parms(): no params data found 01:12:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(0xffffffffffffffff, r4) 01:12:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet_dccp(0x2, 0x6, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a00000029000000ffffde0000000000040000000000ab445e18579da662053b79d29d160000ff07000000000000ff0700"], 0x2a) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x131) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x800, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x7, {0xccaf, 0x0, 0x3, 0x6}}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000540)="e2475aefef03c9d6a75ac89cf0c0fe87c7ca5f915d70ebd43e1a978afce6c59c2b016a2f06b1790279bb409a76cd739916822402dc0ea5f580c199ed7d1c31ed51b3ed636e1a2549e3af42e4dd0f76c0ab76c7a11ec72352253322e62c26b38c619caba1b2506c5d30cfddf81a11", &(0x7f0000000340)=""/52, 0x4}, 0x20) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) fallocate(r3, 0x10, 0xce, 0x3fda) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) [ 310.683148][ C0] sd 0:0:1:0: [sg0] tag#1706 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 310.693826][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB: Test Unit Ready [ 310.700433][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.710310][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.720191][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.730112][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.740005][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.749877][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.759748][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.769638][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.779542][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.789441][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.799322][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.809206][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 310.819073][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[c0]: 00 00 00 00 00 00 00 00 01:12:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2d80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cdc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b22249"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) [ 310.831390][ T32] audit: type=1800 audit(1595034776.291:10): pid=9379 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15725 res=0 [ 310.906911][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.915137][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.924512][ T9247] device bridge_slave_0 entered promiscuous mode [ 311.006029][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.013262][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.022681][ T9247] device bridge_slave_1 entered promiscuous mode 01:12:56 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 311.147584][ T9247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.189133][ T9247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:12:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:12:56 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) [ 311.350154][ T9247] team0: Port device team_slave_0 added [ 311.375809][ T9247] team0: Port device team_slave_1 added [ 311.447076][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.454992][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.481045][ T9247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.633335][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.640571][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.666768][ T9247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.830416][ T9247] device hsr_slave_0 entered promiscuous mode [ 311.864520][ T9247] device hsr_slave_1 entered promiscuous mode [ 311.904406][ T9247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.912048][ T9247] Cannot create hsr debugfs directory [ 312.336962][ T9247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.414942][ T9247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.462211][ T9247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.623094][ T9247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.854579][ T9247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.886094][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.895537][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.913047][ T9247] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.930546][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.940682][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.949981][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.957226][ T8936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.022953][ T9247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.033570][ T9247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.049377][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.058624][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.068670][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.077901][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.085181][ T8936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.094210][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.105122][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.115813][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.126170][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.136317][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.146526][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.156747][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.166098][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.176114][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.185549][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.223274][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.233040][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.288291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.296215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.316762][ T9247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.399043][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.409360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.464636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.474458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.498058][ T9247] device veth0_vlan entered promiscuous mode [ 313.516267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.525246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.567732][ T9247] device veth1_vlan entered promiscuous mode [ 313.651393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.661038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.670383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.680164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.697640][ T9247] device veth0_macvtap entered promiscuous mode [ 313.712646][ T9247] device veth1_macvtap entered promiscuous mode [ 313.749070][ T9247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 313.760002][ T9247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.770003][ T9247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 313.780638][ T9247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.794223][ T9247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.805125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.814619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.823923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.833905][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.857290][ T9247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.867862][ T9247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.879385][ T9247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 313.889925][ T9247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.903355][ T9247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.911868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.921920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:12:59 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000180)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000300)=[{0x1000, 0x0, 0x1, 0x2}, {0x0, 0x7}]}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x80000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:12:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:12:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f0000000240)={@void, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x80, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9b9504", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@srh={0x2f}, @routing={0x0, 0x8, 0x0, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @rand_addr=' \x01\x00']}]}}}}}}}}, 0xba) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 01:13:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x26040010}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@ipv6_delroute={0x238, 0x19, 0x400, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x40, 0x0, 0x2, 0xfd, 0x8, 0x400}, [@RTA_MARK={0x8, 0x10, 0x1}, @RTA_UID={0x8}, @RTA_METRICS={0xd3, 0x8, 0x0, 0x1, "489ae0753e23e266670b818ec0cf6b32a481aba8ad4e90a0739e751cc4bf6360a85f84a0370249d7f44fe6e5bbc78b59633e16d6eadacfd81de066ec66018d8f6906582b3e14c58f2009f6d51e8bda763b3220ea8f59df07d1e4d3aee95ea50d51cc4463af5b374a76b83b470e2389783b02481288c8eb80cafac78007b2deaf5806c5de6bed9237d8b20aa47179eda7d844c33b799fb3ed567df7ade8741e40a2a1b3354b8e348b97b2e01f39d21fa34697c1d2246e3ac92a7b1fb58fa6d0c2741dfb986fae2d8514b222b3531ee7"}, @RTA_OIF={0x8}, @RTA_MARK={0x8, 0x10, 0x7fff}, @RTA_PRIORITY={0x8}, @RTA_EXPIRES={0x8}, @RTA_ENCAP={0xd8, 0x16, 0x0, 0x1, @generic="e8253841f370b9367a2efd17ec0518757a713fb194c091aa7d0527d69b6d482fad89093d925712d8bd2691115f090c533a20ec86be39f519344b24c17ace437e5678a7d8d61e264616374c0fee205759ce5a27ad73faa0b5962b74f6be6337c521c445b286571bb817f23595d641994a843fbf43246b8b1d47428f664017ff059da9633f6e71a2699c824a1c76195c51a79e44ddeb7a30ebd9e2793fb35fa7966ec3733400fbce102eae9effaadb21441f2f537682c743bff359a1e599108bcaa06cea73351b189a0b08c688fc568948022060c6"}, @RTA_METRICS={0x3d, 0x8, 0x0, 0x1, "77454dbb92b89887fabb83919e100993c809730de6df433aa43bb044ef41843690ac1652384c428b673c147d86ee4a9d39b4aad57a41c985cb"}]}, 0x238}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfffd}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_BEACON_TAIL={0xdc, 0xf, "248b19a5e5e650236b0361b816adb991abd04fcd6a82c2208544dd0304bcca82cbfd5364865209a82b4b56b880ae9b619dce710a05340c2d35184c0c0d27cf895da758b4384aa4708b60af48625969c365b9aaadbac57899de758bfc10870f86cac292598246bdd66157f081906ec7437015dede7d072b1c694599726dafb9b5cce85f32a9b008a27f7ab20bc97ed1364c62ea21b8d1e6d7aaee170602f6dd374801f1b673356c6bb26bbf8d6d0933649259e27001f3affd3b641c03b58d4d7754288002c9dc565ba902fb5b95eadb9469fa0558e7268009"}]}, 0x100}, 0x1, 0x0, 0x0, 0x840}, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r9 = dup2(r2, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000000)={0xa9, 0x5, 0x7f}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB='`\x00'/20, @ANYRES32=r1, @ANYBLOB="0000000000000000400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff000020001400070020"], 0x60}}, 0x0) [ 315.482983][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:13:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:01 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={r2, 0x1000, 0x27}, &(0x7f00000024c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613531322d61767832000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033e3a8301c7782ae5b4edb94aece8a748a42b99982865c728450ad2b260a3b173eafc55b30e37ea0e0b73a09b6d3cfc49fb0d5a7a6477d8e43a4eb837500a2b109ee98fcd2bf4f3e08f1b881b53d3b4b94b4de685a94f218fb844cecdc6bedc5fde13c6f0eab20e2d2cb35ab4b44541fa8f07e1d608b3bab1305d48cf878b71b213a3b215c204e0dfdd8bcda598d7e38731cb901181d565aced25ec9854ae5957a38c440e977f0b30c7c"], &(0x7f0000000340)="18187b98c5d8a5bb905f740dfa7d26318fe7cfd881200ebf861d7240e7b3e343586f39cf111b10e7e8f3391a26c8267b83c00d7de59a815055f66628ccc532274ab15600279f6ce9476d55dcfc20954457653bc0a89fd78ede081d7742e1ae87284badec4a22559985fbe43ab9a7681949c66ade67b48c26f338b3e4fc999eb10e4c10052be9549ee0f1029161c40d6e0b33e67d58baef5b45dfaa1bd100bdadac22919da95b96ea8517d40b10de634f5ff8b9e5e5e585c809c1a0a39a3adde7a7d9ff33fdd2b086f9acb64c291051cb9d9ac32121e80977e40c1afca376f1ad693cce6e7e5aae696ba3bfb7f9e864ba147e562bf15c1cab089928482c3e244bec289fd6c077956e3c6451d6083d1ec99505ac63053061fe2ec15fa4b3d4d79afe7dda3eec60f19737cef6841c4ccef5ead49eeabea542f35ea4215189e64c2e9f88b6d6283bc1371ab306053223aae61fb8467974d8081b2f45c564ec2eb63480e142adee701d1f52705811ed7d7d58a01093d96e973b83f7a6e65448e2edce9db5f62eeb0d4de1ae2928050a7f4e3974470d13447a8080f25228d70860bf23870cdcd66c70e114137bc20f820a65047b282d9fd8a2b9b14d4c153ca614b0cd3cd57e246f49f1ec361326d6510802d92131331bf6ce3242a9145cbff20510dc7e45535f49f3ad467e7e721a18bc57aa52da81205d9a1c352e5222ed84f2fe7a993fe5439d0d2eecc17a327f89eadf2cb87ab97ffc2f4ac5705a33ba2f5d21c14900659df0de6236d39a8dd8f4cec8dcbb81352363d16a12933e90d04fc3c4df1018be7dae3d3808b00431219a409a1953bcf53d51be4b0861544662483878c2fe9b510c511a94997aa453bfe1125f451c4fb9c4cefc30a33cc4b040c4d1c1d6c7dadfa5f57f7f247730c00c1c6e5d708fab32dcc96c5ea3d81452f5ca3ca699eaca4834b2b163c8ed482e25f89ea41788c3cc857643febf1d30f304f031918e4f291478c12d3b3ead3187cee30e2dfa93a6b4e6d8fc70e425eaf8226ff0b9102532365f044a6d1233aca5bd83ff731c0f65c3ab19384ff2262999431bd56a03cce4772b7bf485a14c035e33cbe7425e735225ca2922d538ad611dcdba67d18706b7aeb651acb6437126a75dca8029be5b0c228786fa554643ed97304fe67b321989f0b37e123ad5b653f68ab9b37dd85e6744afdacbe940a1d94c5e5fbe8b8641f293b6b5e62c886cb22b4fa067020ec7aaff563db218c35bda480693b8ad5dc2f68ea524bf9368723349cd8c92c6abaa66c49d4a3872dec898824af2689dfcf845815b178ba47956de1a84187422c6523143bc0dbacd930eb2ac1a53aed224f8cb71baf59363512f7642e1826e8a329ee2038210fdb132e59386d0b0d1ddcbaf8ad59ff425de1e0e4def02a2be2a2e5833457bd985ca5f655c83ae1e4322fb28eb3c2f1bfa4d636ee8381c4e80d9e52bfa834fce35a6d2ee624005477bb57f33f27695141a0e0c4cd3386fd5bc40f3b839d2a48583ee5f57cde69962db5ca704af6c6b7b3340d4c4b508b0eda691ce0c9aa94e4e9a476928d8407a7db72e171843abe2bd08b7abbad459d6483feb4301fb718fe5ffab9de39f6c5aacc1284b0f2d48f0359fe9ec5ee8b23cd45c9468dff71af2768fd127a6030498915172d7c369e373db834023e2faba1c8a8c81f0b9ee83d219629305cd9d4163bd91372162a33d95d7a254473861728d2cb3f4ef74b28f3fb62637a016dfb606b24344520c7d88f80190212963a5a0a23e0e426d77e2679f0b52c9b6336042ba3f495815f9a068f72d3d4eb7a793817c4cc35aabbef470b2721aba6b9361ed294ee00f290f3f72457d0a7353047630241475754826e7d84f9184ff33f644f6a8608fcd6625ef98d7eef296220bfc8b6998d6f76c0dc75a86a4ca2667fd5ef9238557a95db284c62542d33c946c860b0b62c016a26a3e0ed4049240650cd8a1133d1ac6f1fbafb2c23b9b421dc48afc37dad580845831b4cfea8ae52cdaf5190123508eadf1d0ab9804b165877a9d8dbd4c0f2ad13e0819be3fc4c3e2fc2e5819db1613c3e24da439b846eb00b8f8ece2cac0a0fecc61fa7a47ef66af2280670645da11b6e50357b4ff4a8ea9d35fad439979eeefb8d11bd331746eeac2e5f0930bdb0b3bb2f83e7e2ab0cb1f954de55b2f620fab463d5d76b2fbd15c6a54aed42b1fe853762fae6645d66ce9e1d6437097d912ad0c12c283432f3c58e78b46e1f5f14125d3fc86cd7570a30d81e64799678abd26996a6b725db952fb7e8faaa9acbbd11f5749f67681f12d944f367a47a45f3dd55836d3945ae8a62af6ad8b5387173f4a94e1d323ee139f8c39454777d07d0d7f2acd5437462afb9aeaaa235f12367d8433c59d2f022b5fa9e2e2a506a8b41e9b489b1efa334c1a8d60ba170b757b264215eaead6c6f76f7db75605a059c65915be54dd8a3864e3cea0245299a3f20caf2b14522f1a31dcc498d4bd3c62da42f1aefff5ce43d07135acd7f83e950c50b2599c44f656729750e57c017a208cccc52936cb57e1beb599bcd7b0a3ec6683724f84d23418064209bedce1da881f0e5d05066e658c7c7682c998dcf5b3dc2b1f2b940bc3136458a0fe872d85f0375fb8083a9b921f3e26d66dc4a086e2bf9fb6c6016199afac70fa8eff0bf76d07678f13c8fb69903b5cc1f63d5fc927b3884c15ca7c519ece3caba127d19fc8fd6066316d3065a7ed4795d130eda8069ee4326ec3a5432adc4c06967614bb3509a28b4b8e4b41fa28925c07dc062b5e5212d11f0fc061ce6fe187146cc67acb8b1d908123beef69075c7c56596942ba1fb854c5701618267b81a8589c5c2d6e237764e1e0e33cbaff5eb6bab1d6e08df18833c15a98fa7fa958ecd23994454dbfdd8fba725a84bb1954947f3d95dd903450af12cd6f839dcdbe6d92a9b97b638d644fd449fe1a247eb6658a25e226b49ad6f4605dba6eaf1b2649e276dc766ea2cce3f047673c38814f1a85ee1a3861fb7212b146b9c642eb5ebc24531fcfe9f26ae5f3247714948008db4e3cd43717555adebfc22f413ffc243e9739adf7a23a61945fd74dbf80db262336e709c69109223462b83aa5d54afac97c19c95532c3c47d9cda3502fc7cd7ca96411fc0770628fad44204cc3328bde2938223ab8a9c276a07f3a41b49759ad834a0bf4d910bd5b2715446ac03089496c19ed03ac0c89fe22219a85d4321156b527bfc6e64eca8aa297e10e66819a9409960b87f95ab8dd1cfe055cb479936b9a7e94509c07402f279a549217b2a970cea84deefa4ea490e03f058a8e8819b5e92e4425d6e6f3c90642679184b00434e3a47624501f78c85f4562bfe3f2150d220dab57182bf552580353ebdaecfd2349687683ac52dc19b487c9d9b84f8841b93d5f60c356c64b96ac658901ad789c6b72f175d5626b25fe42e28bcbeb57fedd6742e61d4cd598d296a9b6123d87b24aa646cf9fef1c22b6efd4b5ae4fb21688e1c9fab14d17a8b7efe74e4ae6d7766caa2398dc7de963cc3d0ab950890eab320f24c4b5f13e83d35834442e985213bff0540874af271071fa2b9ee9a4b9e65c6af46d6d8a4fa0ea6c75dd2398f28ace2663731770777f43875c00b0ffb76b11c9f8b17d1a77cace09041233b28214b256d641094de0583163794b228d8a6ed6554c7990e5c3f0f7f1a087e236929f3fbee12b181e5d41e7148623418a9b7fdff1128f0378a2b4edf8c51aba7970e230cb41f0331604e1098dab9f9d6036451722c64f96e15dcd369b7003b68436516c44d50599a9abc380368e07d0fd13c13ec9a56ccf72c1b13bc9e9cd7d7e4fe6164b2eb9d04a1b149d490a7d3e273f30113c59dcef57003737128c48e4542b846bbaeec899d7fb76eaff6120865b748c5a39ed950e221bc55fff212eb922cce81ecceeaee85c0a848148242c41e10a8572309cbd2916d26d3c05a488e3995141a7e9004789a9d2297e8dbca5a4f115abeed0127af38a0014c363d42f333ccde0934404a16b3f911849f84ab8b99d60055ece5bbf51b6a9077d85de497bbbc6f688b358e8861ae3f622928774c9f38d57c6ff85d769d298ffd9c822ecb4dc1ea515db890bd9bc45bfa2e35589845de51b50d51bee0783453c8b5e2fb34236d0f4ed6511b09e4b824dfc4c15fe8bd03a2f8fb06aabec8d62b205e7d812c7e521f765b4fe058c483b10f6ae89cdbf928b61f3c19246d5d59c7327e124e56a3b5a78a887cff62fbb60c4bef0fc44886ca5d4c1bb1ba22f60239213508862de0ee7e00f5bbfb2f779581a08327afd0a0111aa5f61b30bfbcde4ed1b2b0e4669d9a3553bc9003cac3539895d10bb42c8a5bfea2371e3b194a1528a1955cc079c7c7782461278eef8dceddc51ce1d24a831d80fefc808ba92a9c364708e4c79510ba12005b2c6c06e78c71b019924c7fe25a223517d20c672c5cbce62986fbb1dbc8e5b7e2a729d57d151dc8735c8d3ec7c47207f0e9cf626518713b8a705994c166297723716152be7db869004a95240dc95b74a29dea2a6523c7a4f9cd408351e6f79de70db82ba39cf49d69c1b19ad6354f1f87843f18e2efd1919cbb934372074bc3d35c1d55ceac695f0c380b255907071ab6ed756e78d78a7603ef4b2c8bece122996b0b54bdb23a3d8a168596fe1c026b9b4c88f35c92a93e3f1fff86b59f737e58e1b934606e2823625a84c7d9919b4818595ef93ac6c709bd9599fa6e43a1ba5023a8d9990184d797a8652530108c1cc23a7871114a23dcb82ecd6577529f6ccde76f116ad2e44bc94aa8e6a6b912350927fffe730e60310a61218515f775a1c61c4ba6044ff3a4c1f4e04bc33587d3b90a5662767f625306b550c00ba5cea6473b00825b779d11c036fbf26ac2bc155cde667dbd4ef490c7e4e150e17c31e7aa31254cd8a585f0cc7119dfbc2762669544845655339a911f988dfe5bc087add71842dbdc3dea00c7f554d921c4bc5814923c958921741f41086d2f936956dd6bd2f65a269db74e3863d808302de4dc29442ad32be9d398ba0c4203e81e935eba7ba44c760ea11327dbfaf8af6cbfaf987c4f168e27a0a736b0b0277c811b23c518bc59af4712b61981de20c4cc8fbc6b0b469edbd323b9df1ed64514ae1182d8bd6aef0792eba70467ff6d7792f79588fda62befb9a396fbaeb14680db0ccec60df1c2520ca3323dbf8eabe0139aacc0013595bc2df08901826da8123b59e8fa48f9e43053447e35d800d4de8ba4ca27d3e52a1e91bea5f588cc0cad7cc21742c9e44e0a2efe0e221364c4aa03b249b9b69952a9948baf77c822f4a8a1de450ebf19016b72fc0eeeacd654c3cec87897a67aa7f44e7974702089163f4b3bdfca76e5fa12428b7469d62c7af9eeddf97a56fc5c7dee42b11b78e62aee27cbcbeae16fce7020863c5a6ba61939383d1be2fa93863c48a03ecfbb1f6dfffb2f930bb5d21dc2f787addf42d50a2f839cd1103a8635313abe16a664ae690ca5ee2928776003501511adcf65b4d4621719acce60b1c781b0d12ac603eeb40dea1050774131079a18dc06f17f758bd71c24252824062c89191661c7d7b9fcef81cdead068dbcf974005883267a89db99f581c2372b90a2e5430fdad023e77267ef871b296e450fc03dd88f09e6e72c5bfb2cc3e41c7585d6b60096f439979bc20a57865045d9ea19c394da45713e6292f74985064218f80cdc602c33f6de2f991750fb39729d51e915f3aab6b12f4d8fb6097be30f4a24907d252", &(0x7f0000001340)="0df72bd5872aa0a3d50103de0f223458a351518e61106e37c4020bb2a5d4e76a02d9c0e5143324") socket(0x40000000002, 0x3, 0x2) recvfrom(r0, &(0x7f0000001480)=""/4096, 0x1000, 0x3, &(0x7f0000001380)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4c, 0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}, 0x1221}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$xdp(r0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0xfffffffffffffddf}, 0x0) [ 315.580482][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:13:01 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 01:13:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000026d00095002b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="550000001800", 0x6}], 0x1}, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c00000042", 0x5) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000240)={0x3, 'veth1_to_batadv\x00', {0xf9be}}) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000000)={0x10000, 0x0, 0xffff, 0x500}) 01:13:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x4144f000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x3b291aeaa09c77eb, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x20002025) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004804) syz_emit_ethernet(0x300cce, &(0x7f0000000380)=ANY=[], 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 01:13:01 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000024000f05deffff3f07a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="a00e00002c00270d00"/20, @ANYRES32, @ANYBLOB="00000000000000000a000000090001007273767000000000700e02006c0e0600680e01000a00010070656469740000003c0e0280200e020000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000abf9ea6600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180005"], 0xea0}}, 0x0) [ 316.677660][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 316.782584][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:02 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x4144f000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r3, 0x3b291aeaa09c77eb, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x20002025) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004804) syz_emit_ethernet(0x300cce, &(0x7f0000000380)=ANY=[], 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 01:13:02 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1d576c00", @ANYRES32=r0, @ANYBLOB="00000b4a8a9e543ce03712000c04010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x420800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x7c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x7c}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000000000000004dd6000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073797a30002e37000900010073797a3000000000080003400000000022000200b717fa41a1c9ef49ca7d80f6a7bca12a7d699281eddbea65d78e5ca99470"], 0xb8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 01:13:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r0, r1) [ 317.175055][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.231551][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.285572][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.415945][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.470822][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.547230][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r0, r1) 01:13:03 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1d576c00", @ANYRES32=r0, @ANYBLOB="00000b4a8a9e543ce03712000c04010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x420800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x7c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x7c}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000000000000004dd6000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073797a30002e37000900010073797a3000000000080003400000000022000200b717fa41a1c9ef49ca7d80f6a7bca12a7d699281eddbea65d78e5ca99470"], 0xb8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 01:13:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r0, r1) 01:13:03 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r0, r1) 01:13:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x405, 0xf000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0xa20000, 0x9, 0x80000004, r1, 0x0, &(0x7f0000000a40)={0x9b090a, 0x2, [], @ptr=0x4}}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000200)={0x0, 0x9, 0x101, 0x800, r7}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r8, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042abd7000fcdbdf250c00000005002f0000000000ecb66fe15eb3a943"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x64c, r10, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xd8b1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x96a}, @NL80211_ATTR_IE={0x526, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @link_local}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, "cf14262f84e368914e1c9d3321b849b08e8dc4b09cac5af2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, "e7f4f39d6c748fec048bbc"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @remote}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, "2a28c7c29da241af691c793cc3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, "df095e8bf8f099142b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @local}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x81}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x80000000}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1d, 0x1, "de405acd1301fb40d686b91a025dcee70079af04056111d49c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 01:13:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r0, r1) 01:13:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = semget$private(0x0, 0x1, 0x0) semop(r4, &(0x7f0000000080)=[{0x0, 0xfffb}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000040)=[0x102]) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000040)=[0x81]) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r6 = geteuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r5, 0x0, r6, 0xffffffffffffffff, 0x0, 0x3}, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfff}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001800000125bd7800fcdbdf251d01000008000e00", @ANYRES32=r6, @ANYBLOB="05000d000400000015000200000000a00602000054e9977d6be20ae1040000000c000b0002000080010000e0"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) dup2(r3, r7) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000400)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 01:13:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:04 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) 01:13:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000811000f90682410f060000000000000000", @ANYRES32, @ANYBLOB="033d0000000000006800120009000100766c616e00000000580002000c00000002000000020000000600010000000000400003000c00010020000000052500000c0001000800000034fb85b6d59657dd02000000070000000c000100b0000000200000000c00010020000000030000000a000500220000000000000008000a0039c28bf2ff9270530e4fde"], 0x9c}, 0x1, 0x0, 0x0, 0x20008050}, 0x9a3ab9561cf2ffd5) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405de00000000000005000000000000d2df1d05f63bf74d00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) rt_sigtimedwait(&(0x7f0000000080)={[0x5]}, &(0x7f00000000c0), &(0x7f0000000140)={0x77359400}, 0x8) 01:13:04 executing program 1: set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000000)=""/16) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000100)={0x2, 0x1, 'client1\x00', 0x0, "660b2b4e0dea8b25", "90864f278e7bf548a66c2d45b2db0460cb25ae3bbfb28a362d32ff512e7b1e16"}) 01:13:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x290, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaad7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa424}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77219024}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4beb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a422d5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e3a2a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53acef95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1da7f0}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f929579}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5387bd7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1258ddb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1da940ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6001b217}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb6e241}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61f5adb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27b054a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7df4427e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d56a209}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x290ed085}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4013b584}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f800154}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6812511d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cc61a24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a086a2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e6cc7ac}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x791ce145}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2caf6042}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x243380c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x387b0985}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x771ad434}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb668}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bbd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44e1bde1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fe376f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f75}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17077fb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f28d129}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e46734d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a4c20a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc69c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77a60d21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x177e4709}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2553ae7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x103e30a5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37ce8f88}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1e468d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1396}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x184981d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d48b8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58b589bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf34c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59e9b6b5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x290}, 0x1, 0x0, 0x0, 0x4084}, 0x4000800) listen(r1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)={0x8, 0x9, 0x5, 0x7fff, 0x9, [{0x7e01, 0x1ff, 0x80000001, [], 0x9}, {0x7, 0x0, 0x4, [], 0x401}, {0x5b08, 0x3, 0xdd7e}, {0x7fff, 0x7ff, 0x7ff, [], 0x2084}, {0xfffffffffffffff7, 0x3, 0x400, [], 0x582}, {0x1000, 0x6, 0xfffffffffffffff9, [], 0x8}, {0x4, 0x55d, 0x0, [], 0x3001}, {0x7ff, 0x5, 0x1, [], 0x600}, {0x9, 0x9, 0x1, [], 0x801}]}) 01:13:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:06 executing program 2: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="1f06bfb8", 0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000003000000013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$phonet(r4, &(0x7f00000000c0)="a81c85965bf3579284a921ee02cdfc08f5fe54c71505b65a8dd6c30b82744bc526f75d272fefbcdb", 0x28, 0x4817, &(0x7f0000000140)={0x23, 0x2, 0x1}, 0x10) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = socket(0xf, 0x4, 0xfffffffe) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x20040, 0x4) fcntl$dupfd(r7, 0x0, r5) sendfile(r1, r6, 0x0, 0x4e68d5f8) 01:13:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:08 executing program 1: pipe(&(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0), 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b00000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000008000128009000100766c616e000000007000028006000100000000000c0002001c0000001b0000000600050088a800004c0004800c00010004000000010000000c00010001000000000000000c00010004000000040000000c000100feffffff000000000c00010001040000020000000c0001007f000000800000000400038008000500", @ANYRES32=r5, @ANYBLOB="000054c9", @ANYRES32=r5, @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 01:13:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@newtfilter={0x2c, 0x64, 0xd27, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x2c}}, 0x0) [ 322.930127][ T9720] __nla_validate_parse: 4 callbacks suppressed [ 322.930157][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000140)={'bond_slave_1\x00', 0x7}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r10, 0x14301}}, 0x20}}, 0x0) 01:13:08 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x100) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x22000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r2, 0x200004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000200)) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x400) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000001c0)={0x2, 0xf27f988, [{0x66, 0x0, 0x2}, {0x783e, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0xd1, 0x2, 0xffffffffffffff01, 0x7fffffff}) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 323.162903][ T9727] bond_slave_1: mtu less than device minimum [ 323.170126][ T9727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 323.212408][ C0] sd 0:0:1:0: [sg0] tag#1679 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 323.218564][ T9727] device vlan0 entered promiscuous mode [ 323.223040][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB: Test Unit Ready [ 323.235329][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.245217][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.255088][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.265029][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.274915][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.284801][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.294684][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 323.304569][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.314450][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.324302][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.334154][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.343977][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.353803][ C0] sd 0:0:1:0: [sg0] tag#1679 CDB[c0]: 00 00 00 00 00 00 00 00 [ 323.617922][ T9727] bond_slave_1: mtu less than device minimum [ 323.624548][ T9734] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:13:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 323.939804][ C1] sd 0:0:1:0: [sg0] tag#1680 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 323.950538][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB: Test Unit Ready [ 323.957276][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.967107][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.976956][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 323.986819][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 323.996710][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.006573][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.016407][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.026255][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) flock(r1, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') flock(r0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000949000)=""/101, 0x65}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001280)=""/148, 0x94}], 0x6) [ 324.036076][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.046038][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.055905][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.065774][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.075612][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:09 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x100) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x22000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r2, 0x200004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000200)) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x400) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000001c0)={0x2, 0xf27f988, [{0x66, 0x0, 0x2}, {0x783e, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0xd1, 0x2, 0xffffffffffffff01, 0x7fffffff}) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 01:13:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:09 executing program 2: syz_emit_ethernet(0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000700aab3aaaaaaaa08004500001d0000000000029078000000000000000011009078ac141400c7cfcfa080f1408e5ed4dae40efc541c88abb46fc065fa7d4ac7ca436e9be3f0dae80f96c3c1b36684a33cb6b3d5d3598eb988ba36eb6a377d7bd9d0cb57ea09c8f948d41802193a911e8c6c13f55fb6f8c55abb38d8"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$midi(r2, &(0x7f0000000080)=""/90, 0x5a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') [ 324.537145][ C1] sd 0:0:1:0: [sg0] tag#1681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 324.547759][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB: Test Unit Ready [ 324.554499][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.564373][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.574246][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.584101][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.593961][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.603818][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.613670][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.623418][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.633305][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.643176][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.653051][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.662950][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 324.672807][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x1}, @ipv4=@generic={{0x1c, 0x4, 0x3, 0x20, 0x155, 0x66, 0x0, 0x0, 0x6c, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xe5, [@private=0xa010100, @broadcast, @private=0xa010101, @multicast1, @rand_addr=0x64010101, @remote, @multicast2]}, @end, @rr={0x7, 0xb, 0x8d, [@multicast2, @broadcast]}, @lsrr={0x83, 0x2b, 0xc, [@local, @remote, @empty, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010101, @multicast1, @broadcast]}]}}, "85a3072429071e3fc05d00c631ddf7e3aeb4c8f47604fa7fc4c98b1d4a06614533324897811d1d2ded13f2116fd70eb41fcd81bf6e0b161a7ae8fc42fee0eb00fbc98b37cdeb89e2da61cc2440bb5cd05bd5ee1a0a38c9cc5d2f69c7555946863fa21552fca0c98033a9f22702ede65d934260e80e883f7848934b2e5cf4010285ec28044f5afc99fe4158a75fa3148fd582a3e601d8947356925c1ec8cc336032356956684c5ecb4645645e3eae73bb29dcc647caa1e2aa08eb293f333fbd7f1a25fcec4e1c7182d67623f90f105991cf1f13b7657d1da418f92cc2542399eace478d6e04"}}, 0x15f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r3 = dup(r2) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000400)={0x401, 0x5, 0x0, [{0x60, 0x200, 0xffffffffffffff50, 0xff, 0xff, 0x1f, 0x7f}, {0x8, 0x4, 0x8, 0x7f, 0x81, 0x1, 0x80}, {0x7fffffff, 0x8, 0x3, 0xad, 0x3, 0x3a, 0x6}, {0x1, 0x3, 0x81, 0x40, 0xff, 0x3, 0x2}, {0x4, 0x9, 0x20, 0x1, 0x9, 0xff, 0xff}]}) 01:13:10 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x100) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x22000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1b2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) ftruncate(r2, 0x200004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000200)) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x400) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000001c0)={0x2, 0xf27f988, [{0x66, 0x0, 0x2}, {0x783e, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0xd1, 0x2, 0xffffffffffffff01, 0x7fffffff}) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 01:13:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 325.423248][ C0] sd 0:0:1:0: [sg0] tag#1683 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 325.433897][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB: Test Unit Ready [ 325.440504][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.450418][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.460354][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.470233][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.480071][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.489907][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.499758][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.509591][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.519409][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.529202][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.539023][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.548846][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.558665][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$rds(r4, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000013c0)=""/213, 0xd5}], 0x6, &(0x7f00000015c0)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x200}, &(0x7f0000001540)=0x3f, &(0x7f0000001580)=0x3, 0x800, 0x4, 0xac5, 0x8000, 0x49, 0x3}}], 0x58, 0x20000004}, 0x831) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050e05", 0x2e}], 0x1}, 0x80) 01:13:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 326.537816][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.546023][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.554308][ T9785] device bridge0 entered promiscuous mode 01:13:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$rds(r4, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000280)=""/50, 0x32}, {&(0x7f00000013c0)=""/213, 0xd5}], 0x6, &(0x7f00000015c0)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x200}, &(0x7f0000001540)=0x3f, &(0x7f0000001580)=0x3, 0x800, 0x4, 0xac5, 0x8000, 0x49, 0x3}}], 0x58, 0x20000004}, 0x831) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050e05", 0x2e}], 0x1}, 0x80) 01:13:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) r3 = socket(0x1e, 0x1, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r4, 0x0) sendmsg(r3, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9, 0x44, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x40) r6 = dup2(r0, r5) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000040)=""/245) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000180)="1c0000001e000000000000007c891265981edff4bae8be7ff29f0df25d03558d37811e5afca377cb7b97d92759309102cb4b82c0dce0aaa3aebd3356d06bc6dc37b1bff0820e31fc16193021ba18b81d51b6ceca612ba4327787168ea164c448c8559988bbc713d4ad1e6603c5c380f400844d225831125fcdd993985d2d8c5200"/144, 0x90, 0x48040, 0x0, 0x0) 01:13:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) chmod(0x0, 0x4d) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42b1, 0x0, @perf_config_ext={0x46, 0xffff}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x259) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = dup(r5) ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f0000000000)={0x7e, 0x0, [0x482], [0xc1]}) write$P9_RSTATFS(r6, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0xffffff90, 0x6, 0x7, 0x200, 0x5, 0x3, 0x1, 0x3, 0x8}}, 0x43) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) clone(0x68880000, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80) 01:13:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:12 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e21, @remote}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x12, &(0x7f0000000000), 0x20a154cc) [ 327.556726][ C0] sd 0:0:1:0: [sg0] tag#1684 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 327.567459][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB: Test Unit Ready [ 327.574214][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.584096][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.593991][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.603864][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.613860][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.623801][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.633671][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.643770][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.654132][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.664013][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.673899][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.683773][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.693680][ C0] sd 0:0:1:0: [sg0] tag#1684 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 327.736559][ T9811] IPVS: ftp: loaded support on port[0] = 21 01:13:13 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x12) syz_open_dev$sg(0x0, 0x0, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000010000000000000008410000001400180000000069623a6d6163767461703000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0000df25010100000000000007411000001c001868315f6d6163767461700000104c9a82dff6b16f15cc59551940a56009bab3ad6d7016ac5c518fb547afaac652ca596b502c420a4d432fe95a3e08cc0d46a31c1ffd0f1d80459d0629a62c270cf9b5f333fd16"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xec909503730eeda8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 01:13:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 328.352092][ C1] sd 0:0:1:0: [sg0] tag#1685 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 328.362700][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB: Test Unit Ready [ 328.369415][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.379205][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.388983][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.398810][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.408581][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.418359][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.428127][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.437915][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.447743][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.457532][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.467314][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.477097][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.486871][ C1] sd 0:0:1:0: [sg0] tag#1685 CDB[c0]: 00 00 00 00 00 00 00 00 [ 328.638812][ T9807] IPVS: ftp: loaded support on port[0] = 21 01:13:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000000)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x3) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x5) sendfile(r2, r3, &(0x7f00000000c0), 0xfffb) fcntl$addseals(r3, 0x409, 0xb) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fremovexattr(r3, &(0x7f0000000100)=@known='system.posix_acl_default\x00') dup3(r1, r3, 0x0) 01:13:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 329.377912][ T7] tipc: TX() has been purged, node left! 01:13:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @private1}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, 0xffffffffc0000002, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f00242d05ab0acd5913c91d27d7083ba34d960f2ac73e37b97512f2c6f7f9a4d0a73a8be2bf94a1bb5e1166571e98e0bee069023834140d69b5ce764174ed85cb71a26319dd0b22da6e33463aa6e7998826a09db2ab739a5778b662695a8684682de81bc1282151ae4ffae9b355d558af60af3c", @ANYRES32, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="000000001c000000000000000113ae9c090000128b1e9df77458088a60eb3b1f7f08f1c1f50305a4c991787be42ae255bb34a59201a66a780fa057010651fdf781680b3a0772ded43cdaa1263b10d2", @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400038f2458eccc9377000001009ece6754cd9569e52eb3bee2000d8f200000", @ANYRES16, @ANYRES32=r2, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000}], 0x2, 0x0) fchown(r3, 0x0, r6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 329.689331][ C0] sd 0:0:1:0: [sg0] tag#1686 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 329.700043][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB: Test Unit Ready [ 329.706806][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.716640][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.726474][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.736336][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.746273][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.756195][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.766031][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.775860][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.785679][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.795507][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.805330][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.815172][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.825017][ C0] sd 0:0:1:0: [sg0] tag#1686 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:15 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000800)={@none, 0x0, 0x8001, 0x8}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000008c0)={0xa58d, [[0xffffffff, 0x4e2, 0x1, 0x4, 0x0, 0x4f0, 0x1ff, 0x52], [0x0, 0x4, 0x4, 0x8, 0xff, 0xfffffffd, 0x5, 0x9], [0x9, 0xd9f, 0x8001, 0x5, 0x90e, 0x8001, 0xfffffffd, 0xed6b]], [], [{0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20000000, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x0, 0x0, 0x1}, {0x50, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x92c, 0x0, 0x1, 0x1}, {0x3f, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0x401, 0x0, 0x1, 0x1}, {0x80000001, 0x7, 0x0, 0x1}], [], 0x1}) 01:13:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 330.159084][ T9894] dccp_invalid_packet: P.Data Offset(0) too small [ 330.296776][ C0] sd 0:0:1:0: [sg0] tag#1689 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 330.307418][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB: Test Unit Ready [ 330.314174][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.324006][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.333840][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:15 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000a80)='\\\xba\x140D\xf8syste0md5sum$\x00`\xfa\x90$\x1f\x8c3\xa1\xa8k\x1e\xca9\xb2\xbb\b\x8f\\\xbd\xc0\xc0\xa5\xf8;|\x16-\xbcR\x0f\x00FVL/3w\x1d\x1dTRG\xd37z\xcbS\x82\x7f\xac;Be!\x84Q\xb7\xdc\xb68\xfd\xb6\x00\x80\xf9\xd7?\xc0\x1a\x9b\xba\x0f\x01\x96\xa8\x0f\x11\x1c/~O\x92\xd8D\x90\xf7\x9aW\xf3\x19tH\\\x92\xb3\xe3\xff\xcb@\xd4\xc6%\xea\xe7)\x81\xdc\x91T\x85\x14\x84\xe4\xae\xe2\xd8\xf6S\xb5\xbb\x9d\xa9Ek\x1az\x7fD\xa4Y\xd2zIU\xe4\b\xc6Q\x1a\xcbr\x191\x19\xd70\x17\xd9qD\xaa\b\x1d\x9ei\x8c\x83\x9eVa$\xa1\xff\xff\xff\xff\xff\xff\xff\xf9\xfac\xce9\xe8\r\x17\xf0\xf4\x89B[\xfc\xe3?\xbe\xc4\xc0{\x1e\xc5g\xc7\x12\xf6?\f\xdd\xec\xfc\x1c\xb3XS\xc0\fPm~$M>A\x8a\xd6\x1d\xd8\xe4\xf9?\xea\x1a\x15\x13J\xe3\"\x87\x9bX\xcf\x17g\x9e1\r9v\\\x85\x8c\x02\x7f\x13\tF\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f00000000c0)='$.6/%cpuset]\x00', 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = inotify_init1(0x0) r4 = dup2(r3, r1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x5d181, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 330.343659][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.353430][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.363275][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.373119][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.382942][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.392786][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.402641][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.412495][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.422340][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.432176][ C0] sd 0:0:1:0: [sg0] tag#1689 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 330.760565][ T9911] IPVS: ftp: loaded support on port[0] = 21 01:13:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) 01:13:16 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_delneigh={0x74, 0x1d, 0x100, 0x70bd29, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x9, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_PROBES={0x8, 0x4, 0x80}, @NDA_VNI={0x8, 0x7, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @private2}, @NDA_IFINDEX={0x8, 0x8, r7}, @NDA_PROBES={0x8, 0x4, 0xaa}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r8 = fcntl$dupfd(r3, 0x0, r4) ioctl$EVIOCGABS3F(r8, 0x8018457f, &(0x7f0000000100)=""/12) r9 = dup2(r2, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) ioctl$EVIOCGPROP(r9, 0xc004743e, &(0x7f0000000000)=""/246) dup3(r1, r9, 0x0) 01:13:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 331.861139][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 332.054400][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) [ 332.407237][ T9989] dccp_invalid_packet: P.Data Offset(0) too small 01:13:17 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0x3d}) sendmsg$AUDIT_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x3e9, 0x4, 0x70bd25, 0x0, {0x19, 0x0, 0x2, r3, 0xffff0001, 0x1, 0x0, 0x3f, 0x0, 0xfffeffff}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6f62a6fb609d76f", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f7", 0x61}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0", 0x1c}, {0x0}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r0, r0]}}], 0x88, 0x4000}], 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e008105e00f80ecdbc0b9f207c804a01d000000302e20000000a3030e000a0002000000da1b40d80589", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) 01:13:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 332.717428][ C0] sd 0:0:1:0: [sg0] tag#1690 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 332.728080][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB: Test Unit Ready [ 332.734813][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.745022][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.754868][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.764707][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.774540][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.784425][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.794279][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.804247][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.814106][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.823938][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.833780][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.843608][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 332.853346][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[c0]: 00 00 00 00 00 00 00 00 [ 332.935877][T10065] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 332.946921][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 333.010260][ C1] sd 0:0:1:0: [sg0] tag#1691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 333.020972][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB: Test Unit Ready [ 333.027706][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.037543][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.047321][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.057185][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.067003][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.076811][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.086604][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.096407][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.106205][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.116020][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.125833][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.135633][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 333.145391][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[c0]: 00 00 00 00 00 00 00 00 [ 333.425514][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.432745][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.442985][ T9911] device bridge_slave_0 entered promiscuous mode [ 333.514917][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.522143][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.531644][ T9911] device bridge_slave_1 entered promiscuous mode [ 333.660464][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.719676][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.846926][ T9911] team0: Port device team_slave_0 added [ 333.881923][ T9911] team0: Port device team_slave_1 added [ 333.977682][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.984862][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.011009][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.087654][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.094792][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.120922][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.234202][ T9911] device hsr_slave_0 entered promiscuous mode [ 334.284894][ T9911] device hsr_slave_1 entered promiscuous mode [ 334.334599][ T9911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.342333][ T9911] Cannot create hsr debugfs directory [ 334.635600][ T7] tipc: TX() has been purged, node left! [ 334.672734][ T9911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.720912][ T9911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.820140][ T9911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.900803][ T9911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.228268][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.386149][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.399192][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.408153][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.452127][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.462074][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.471626][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.479051][ T9206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.584507][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.593810][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.604242][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.613586][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.620773][ T9206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.629886][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.640813][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.651687][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.662102][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.672413][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.682946][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.693318][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.702933][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.712453][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.722068][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.736696][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.745929][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.847043][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.855774][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.876615][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.945861][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.955829][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.035026][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.045129][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.070518][ T9911] device veth0_vlan entered promiscuous mode [ 336.107398][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.117218][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.133286][ T9911] device veth1_vlan entered promiscuous mode [ 336.198133][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.208051][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.225510][ T9911] device veth0_macvtap entered promiscuous mode [ 336.246158][ T9911] device veth1_macvtap entered promiscuous mode [ 336.336877][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.348343][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.358362][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.368892][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.378870][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.389388][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.403286][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.413600][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.423062][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.432229][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.442141][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.569255][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.581168][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.591226][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.603675][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.613698][ T9911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.624319][ T9911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.638037][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.646954][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.657102][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:13:22 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000800)={@none, 0x0, 0x8001, 0x8}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000008c0)={0xa58d, [[0xffffffff, 0x4e2, 0x1, 0x4, 0x0, 0x4f0, 0x1ff, 0x52], [0x0, 0x4, 0x4, 0x8, 0xff, 0xfffffffd, 0x5, 0x9], [0x9, 0xd9f, 0x8001, 0x5, 0x90e, 0x8001, 0xfffffffd, 0xed6b]], [], [{0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20000000, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x0, 0x0, 0x1}, {0x50, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x92c, 0x0, 0x1, 0x1}, {0x3f, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0x401, 0x0, 0x1, 0x1}, {0x80000001, 0x7, 0x0, 0x1}], [], 0x1}) 01:13:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:13:22 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/207, 0xcf}], 0x1, 0xaa) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x13, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0x3d}) sendmsg$AUDIT_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0x3e9, 0x4, 0x70bd25, 0x0, {0x19, 0x0, 0x2, r3, 0xffff0001, 0x1, 0x0, 0x3f, 0x0, 0xfffeffff}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f6f62a6fb609d76f", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f7", 0x61}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0", 0x1c}, {0x0}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r0, r0]}}], 0x88, 0x4000}], 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e008105e00f80ecdbc0b9f207c804a01d000000302e20000000a3030e000a0002000000da1b40d80589", 0x2e}], 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 337.172443][T10195] dccp_invalid_packet: P.Data Offset(0) too small [ 337.198321][ C1] sd 0:0:1:0: [sg0] tag#1692 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 337.208964][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB: Test Unit Ready [ 337.215764][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.225595][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.235411][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.245630][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.255497][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.265374][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.275680][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.285533][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.295846][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.305713][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 337.315526][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.325347][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 337.335168][ C1] sd 0:0:1:0: [sg0] tag#1692 CDB[c0]: 00 00 00 00 00 00 00 00 01:13:22 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000800)={@none, 0x0, 0x8001, 0x8}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000008c0)={0xa58d, [[0xffffffff, 0x4e2, 0x1, 0x4, 0x0, 0x4f0, 0x1ff, 0x52], [0x0, 0x4, 0x4, 0x8, 0xff, 0xfffffffd, 0x5, 0x9], [0x9, 0xd9f, 0x8001, 0x5, 0x90e, 0x8001, 0xfffffffd, 0xed6b]], [], [{0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20000000, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x0, 0x0, 0x1}, {0x50, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x92c, 0x0, 0x1, 0x1}, {0x3f, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0x401, 0x0, 0x1, 0x1}, {0x80000001, 0x7, 0x0, 0x1}], [], 0x1}) [ 337.555049][T10198] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 01:13:23 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e105", 0xd}, {&(0x7f0000000100)="bc1402", 0x3}], 0x2, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x26}, @private}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @end, @ssrr={0x89, 0xf, 0x0, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@broadcast, 0xfffffffe}, {@dev}]}]}}}], 0x58}, 0x0) 01:13:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) dup2(r3, r4) 01:13:23 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000800)={@none, 0x0, 0x8001, 0x8}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000008c0)={0xa58d, [[0xffffffff, 0x4e2, 0x1, 0x4, 0x0, 0x4f0, 0x1ff, 0x52], [0x0, 0x4, 0x4, 0x8, 0xff, 0xfffffffd, 0x5, 0x9], [0x9, 0xd9f, 0x8001, 0x5, 0x90e, 0x8001, 0xfffffffd, 0xed6b]], [], [{0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x20000000, 0x3ff, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x0, 0x0, 0x1}, {0x50, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x92c, 0x0, 0x1, 0x1}, {0x3f, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0x401, 0x0, 0x1, 0x1}, {0x80000001, 0x7, 0x0, 0x1}], [], 0x1}) [ 337.876823][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.995164][T10217] dccp_invalid_packet: P.Data Offset(0) too small 01:13:23 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket(0x11, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x84000) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_MASTER={0x8}]}, 0x34}}, 0x0) 01:13:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) dup2(r3, r4) 01:13:23 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000800)={@none, 0x0, 0x8001, 0x8}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) [ 338.376966][T10230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.519543][T10237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:13:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0) dup2(r3, r4) 01:13:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:24 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000800)={@none, 0x0, 0x8001, 0x8}) [ 338.850348][T10243] dccp_invalid_packet: P.Data Offset(0) too small 01:13:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r3, r4) 01:13:24 executing program 1: ptrace$cont(0x9, 0x0, 0x9, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xfffb}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x102]) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x81]) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r2 = geteuid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r1, 0x0, r2, 0xffffffffffffffff, 0x0, 0x3}, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfff}) r3 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)="31a8a74c68e0576d9cd0c4741a0f6839f84fc6baa465a3f1153fbe538f25a929d282536660351a3581028e66de385e10e131124fe3f5ba72073e2d3c3f96cfb6d13ca9b9c6d5a0fee2b32c81839ef87b1843cf32bb270e925b79761d84da87242cd3d97cf159acc29f558ec395850eaaaa9061726fb30646066dd00503f0eec9f7c956570dddedbf0e6692cbf6427e52855de62360ab42e3", 0x98}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="0bd9674d6388c29dda1b4a92cb22a805afa5be2fe2d2603275a712fd908f686b55db0c8f", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9004169d0c8bc64e8614b8c8bb24ec77d98ace18a21334ec94010058c0fe3708643a65652394df26a931ecf5f38d8b"], 0xa8}], 0x1, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x3a, 0xd770, "a06b5a41bc3eae3666c3b9ae42f592939a47b115061938c5bacce909ccb60fbfcdf50fe3116a3d071e68827e298d02402293"}, &(0x7f00000004c0), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}], 0x20, 0x8040}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) 01:13:24 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) pipe2(&(0x7f00000007c0), 0x4800) 01:13:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r3, r4) 01:13:24 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/195, &(0x7f0000000540)=0xc3) 01:13:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r2, r3) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={r4}, &(0x7f00000003c0)=0x8) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x8800, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000540)={0x84bb, 0x11, [{0x4}, {0x5}, {0xe}, {0xd, 0x1}, {0xe, 0x1}, {0x8}, {0x19}, {0x1}, {0x6, 0x1}, {0x1}, {0x6}, {0xe}, {0x8}, {0x8}, {0x8, 0x1}, {0x1}, {0xe, 0x1}]}) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000300)={0x5, 0x7, 0x9, 0x6, 0x3}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x9, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x90, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in6={0xa, 0x4e20, 0x616, @mcast2, 0x380}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x8a9, @dev={0xfe, 0x80, [], 0x23}, 0x7}, @in6={0xa, 0x4e20, 0xf7a8, @empty, 0x5}]}, &(0x7f0000000280)=0x10) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x154, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xad, @empty, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) 01:13:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r3, r4) [ 339.704486][T10264] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.715190][T10264] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.715440][T10269] dccp_invalid_packet: P.Data Offset(0) too small 01:13:25 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000400)=0xffff) 01:13:25 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) [ 340.309621][T10264] team0: Port device veth21 added 01:13:26 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000340)) 01:13:26 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) [ 340.855936][T10264] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.866521][T10264] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(0xffffffffffffffff, r3) 01:13:26 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0x1, 0x2, 0x1}) clock_getres(0x5, &(0x7f00000002c0)) [ 341.305093][T10264] team0: Port device veth23 added 01:13:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(0xffffffffffffffff, r3) 01:13:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r2, r3) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:27 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) clock_getres(0x5, &(0x7f00000002c0)) 01:13:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(0xffffffffffffffff, r3) [ 341.741565][T10308] dccp_invalid_packet: P.Data Offset(0) too small 01:13:27 executing program 1: r0 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x0]) getresuid(0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getegid() setgroups(0x2, &(0x7f00000000c0)=[0x0, 0x0]) geteuid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x1e3142, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8) 01:13:27 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) clock_getres(0x5, &(0x7f00000002c0)) 01:13:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r2, r3) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, 0xffffffffffffffff) [ 342.475834][T10324] dccp_invalid_packet: P.Data Offset(0) too small 01:13:28 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) clock_getres(0x5, &(0x7f00000002c0)) 01:13:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, 0xffffffffffffffff) 01:13:28 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x653cea36, 0x9}) clock_getres(0x5, &(0x7f00000002c0)) 01:13:28 executing program 1: ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f00000000c0)={0xa0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r0}, 0x0, 0x0, 0x0) 01:13:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, 0xffffffffffffffff) 01:13:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:28 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, r1, 0x0, 0x4}, 0x14) clock_getres(0x5, &(0x7f00000002c0)) [ 343.312286][T10350] dccp_invalid_packet: P.Data Offset(0) too small 01:13:28 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000400140008001b000000000073767a1457888c84a923f62875c053cbf73359096ab14f73e7df359cf53333"], 0x2c}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 01:13:28 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10100, 0x0) clock_getres(0x5, &(0x7f00000002c0)) 01:13:28 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 343.713196][T10365] FAULT_INJECTION: forcing a failure. [ 343.713196][T10365] name failslab, interval 1, probability 0, space 0, times 1 [ 343.726166][T10365] CPU: 1 PID: 10365 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 343.734902][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.745028][T10365] Call Trace: [ 343.748416][T10365] dump_stack+0x1df/0x240 [ 343.752840][T10365] should_fail+0x8b7/0x9e0 [ 343.757897][T10365] __should_failslab+0x1f6/0x290 [ 343.762933][T10365] should_failslab+0x29/0x70 [ 343.767626][T10365] kmem_cache_alloc_trace+0xf3/0xd70 [ 343.772999][T10365] ? kmsan_get_metadata+0x4f/0x180 [ 343.778206][T10365] ? snd_seq_port_connect+0x118/0x7d0 [ 343.783659][T10365] ? kmsan_get_metadata+0x11d/0x180 [ 343.788935][T10365] ? kmsan_set_origin_checked+0x95/0xf0 [ 343.794561][T10365] ? kmsan_get_metadata+0x11d/0x180 [ 343.799833][T10365] ? kmsan_get_metadata+0x11d/0x180 [ 343.805128][T10365] snd_seq_port_connect+0x118/0x7d0 [ 343.810420][T10365] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 343.816309][T10365] snd_seq_ioctl_subscribe_port+0x76e/0xb80 [ 343.822283][T10365] ? kmsan_get_metadata+0x4f/0x180 [ 343.827495][T10365] ? snd_seq_ioctl_set_port_info+0x240/0x240 [ 343.833546][T10365] snd_seq_kernel_client_ctl+0x561/0x5e0 [ 343.839277][T10365] snd_seq_oss_midi_open+0x7d9/0xe90 [ 343.844695][T10365] snd_seq_oss_synth_reset+0x6cd/0xd60 [ 343.850251][T10365] snd_seq_oss_reset+0xa0/0x380 [ 343.855192][T10365] snd_seq_oss_release+0xd2/0x420 [ 343.860309][T10365] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 343.866484][T10365] odev_release+0x85/0xe0 [ 343.870895][T10365] ? odev_open+0x130/0x130 [ 343.875384][T10365] __fput+0x4ae/0xb80 [ 343.879457][T10365] ____fput+0x37/0x40 [ 343.883639][T10365] ? fput_many+0x2a0/0x2a0 [ 343.888153][T10365] task_work_run+0x1ee/0x2d0 [ 343.892838][T10365] __prepare_exit_to_usermode+0x422/0x4d0 [ 343.898653][T10365] __syscall_return_slowpath+0x89/0x5b0 [ 343.904462][T10365] ? __se_sys_dup2+0x9f/0x2c0 [ 343.909219][T10365] ? kmsan_set_origin_checked+0x95/0xf0 [ 343.914866][T10365] ? kmsan_get_metadata+0x4f/0x180 [ 343.920084][T10365] do_syscall_64+0xd6/0x150 [ 343.924711][T10365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 343.930660][T10365] RIP: 0033:0x45c1d9 [ 343.934597][T10365] Code: Bad RIP value. [ 343.938713][T10365] RSP: 002b:00007fa84623dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 343.947205][T10365] RAX: 0000000000000006 RBX: 0000000000002940 RCX: 000000000045c1d9 [ 343.955239][T10365] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 343.963276][T10365] RBP: 00007fa84623dca0 R08: 0000000000000000 R09: 0000000000000000 [ 343.971307][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.979347][T10365] R13: 0000000000c9fb6f R14: 00007fa84623e9c0 R15: 000000000078bfac [ 344.099537][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.151312][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.160842][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.417196][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.464216][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.473647][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:13:30 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x81, 0x8) clock_getres(0x5, &(0x7f00000002c0)) 01:13:30 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="726177b9f70000000000000000000000000000000000000000000000000000000200000003000000880400000000000098000000000000009800000500000000f0030000f0030000f0030000f0030000f00300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000070000000000ac1414aa0000000000000000000000bd55de7ba4bd21e9d012d6b80076657468315f746f5f626f6e6400000065716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001003580300000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000269705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000fcffffff0e0000600000000000000000000000005001686173686c696d697400000001000000000000000000000000000000000276657468305f746f5f7b737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600090000000000000000000000000000006e00000000000000000000000900000008000000000000000000000000000000480054454500000000000000000000ba60eabc545ffd22000000000000000001ac1414bb0000000000000000000000007465716c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff2161e17b6a99eea1aedabbf9d271bf60db1194afb8ee43d6b099b61cc6a009ea0679"], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xd1e5}]}}}]}, 0x3c}}, 0x0) 01:13:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:30 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x9) clock_getres(0x5, &(0x7f00000002c0)) 01:13:30 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfff}, 0xc) clock_getres(0x5, &(0x7f00000002c0)) 01:13:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xffffffff, 0x9, 0x40, 0x52d, 0xff, "ddf430a763078e2adf2a4e31539d3d555809a1", 0xffff, 0x862}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0xfffffffa, 0x3}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80303, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) dup2(r3, r7) 01:13:31 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) 01:13:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$KDSKBLED(r0, 0x4b65, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vcs\x00', 0x80380, 0x0) getpeername$l2tp6(r3, &(0x7f0000001440)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001480)=0x20) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$netlink(r4, 0x10e, 0x6, &(0x7f0000001540)=""/76, &(0x7f00000015c0)=0x4c) io_setup(0x81, &(0x7f0000000040)=0x0) r6 = open(&(0x7f0000000280)='./bus\x00', 0x200080, 0xd) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8920, &(0x7f0000000680)={'veth0_to_batadv\x00', @ifru_map={0x4, 0x400000040, 0x2b, 0xb, 0xf, 0x2}}) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x800) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f00000014c0)="6a21b8eabae296bebb9256202aee3e2704999688ea4d04a2303b6e", 0x1b, 0x80000}]) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) write$P9_RAUTH(r7, &(0x7f0000001500)={0x14, 0x67, 0x1}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, &(0x7f0000000300)=""/4096, &(0x7f0000000000)=0x1000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) 01:13:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}}, 0x8400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', r6, 0x8000, 0x40, 0x8, 0x20, {{0x16, 0x4, 0x3, 0x9, 0x58, 0x64, 0x0, 0xff, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x28}, {[@cipso={0x86, 0x3a, 0x3, [{0x2, 0x12, "9cd64ec1f613c8fefa2eeb2b64b7a846"}, {0x1, 0x12, "3df2d7ca9ff39b8f394037156363341b"}, {0x0, 0x2}, {0x5, 0xe, "471f7deb5a128bd77671de8d"}]}, @noop, @rr={0x7, 0x7, 0xc2, [@broadcast]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xf28, 0x2, 0x3, 0x0, 0x1, 0x101, [], r4, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x40) r7 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r8, r9) 01:13:31 executing program 3: clock_getres(0x0, &(0x7f00000002c0)) [ 346.061175][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:31 executing program 3: clock_getres(0x0, &(0x7f00000002c0)) 01:13:31 executing program 0: r0 = socket(0xa, 0x803, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000015c0)={0x0, {{0x2, 0x4e20, @multicast1}}}, 0x88) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x9f3}, 0x10) write(r4, &(0x7f0000000100)="200000001a000100000000000000a0008000af04e9e25d111b2000000000ffff", 0x20) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20c40, 0x0) sendmsg$kcm(r5, &(0x7f0000002740)={&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x1}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000001c0)="30fc2d5e40b1fe7a5dc4523e1f502a9f78b49148bf715af5b06f6aa600bab64ee90bd3a26f3e4e", 0x27}, {&(0x7f0000000200)="eeaa940e96a696e74cec764d4bb76ab7b9b196075b851ee93f2427e555d5a439ad28666f2d5e8603dd5f845493994ddf2a695a09f83e2b0f3d4b1f4d52e13336006a0a78747973484382", 0x4a}, {&(0x7f0000000280)="33e3f5e9124b83930b57e501ee7e6ce45fb3c79324ea6e3c0780ae5e3c295c413f03f45458ef9ff527fe5fdafdf7ee0f2be0cd04ab360791b52ff4a8eb665e24684f8a5def69086dda436fc99062841a0c16cd6a156bdaad6697b529fac81f55db3a024c86722484cfaa7d5e788a515cf59d483d0e845b38140405d9ef916de6c4", 0x81}, {&(0x7f0000000340)="dfb958ce5d9b5f6d71ba28b310d6b85bdce0c44522ae62c913f6638718699525fdad9b354c60832b0862d9c4cd39b4f61f9efdf2c9d8e1b4cf91cd0a64ec577701057126788c7ef80bd001cabb05313580e5ec32582b4d948557e1cb9ae45160caf1824f08ec88980f", 0x69}, {&(0x7f00000003c0)="9b3a9b436f138925faf9b581326ecef981ed3c315bd813691c23310a577915127fa6485bf0558505ec9f66beded76221388ae515e49493609c58c95648ece8d8845a81b7fa3642a64652ec569799cd3cd021f49602a565f2bd19e79cef71c8e6104abff99be141d20ccddeff03d19a997d704ae8b313aa5e3d852c03d0a430c0b3ee8222c972cc360fa721ee3c067f55acab21d8eb9159d919d939b98baa", 0x9e}, {&(0x7f0000000480)="f0b469469df2aca228ea3210e00e847a213c6d0a5da7a14c72bd3b4f4fd9417d0d74175f2d735eb458caade512aa081e9226cb0fc4aaf763de191618e3f3e84092bf248d9215c01a5b0053ec773779efef14ec6dd8da14635559acd536555c285e368f7f1b1c22c7bd7ed05781738b4e0ba442432acad80e06cd58f071bdc124ccdbe7c56a6fb900036f1d80a5", 0x8d}, {&(0x7f0000000540)="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", 0x1000}], 0x7, &(0x7f0000003a40)=ANY=[@ANYBLOB="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"], 0x1178}, 0x890) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket(0x1e, 0x3, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) 01:13:31 executing program 3: clock_getres(0x0, &(0x7f00000002c0)) 01:13:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$KDSKBLED(r0, 0x4b65, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vcs\x00', 0x80380, 0x0) getpeername$l2tp6(r3, &(0x7f0000001440)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001480)=0x20) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$netlink(r4, 0x10e, 0x6, &(0x7f0000001540)=""/76, &(0x7f00000015c0)=0x4c) io_setup(0x81, &(0x7f0000000040)=0x0) r6 = open(&(0x7f0000000280)='./bus\x00', 0x200080, 0xd) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8920, &(0x7f0000000680)={'veth0_to_batadv\x00', @ifru_map={0x4, 0x400000040, 0x2b, 0xb, 0xf, 0x2}}) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x800) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f00000014c0)="6a21b8eabae296bebb9256202aee3e2704999688ea4d04a2303b6e", 0x1b, 0x80000}]) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) write$P9_RAUTH(r7, &(0x7f0000001500)={0x14, 0x67, 0x1}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, &(0x7f0000000300)=""/4096, &(0x7f0000000000)=0x1000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) 01:13:32 executing program 3: clock_getres(0x5, 0x0) [ 346.826682][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:13:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f00000000c0)=""/223) r5 = dup2(r0, r1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f00000001c0)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) 01:13:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r0, 0x2403d000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x8971, &(0x7f0000000080)={'geneve1\x00', @ifru_addrs=@nl=@proc}) r7 = dup2(r6, r5) dup3(r7, r1, 0x0) 01:13:32 executing program 3: clock_getres(0x5, 0x0) [ 347.119674][T10455] dccp_invalid_packet: P.Data Offset(0) too small 01:13:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000680)={0x2f, @broadcast, 0x4e20, 0x2, 'rr\x00', 0x5, 0x8, 0x21}, 0x2c) dup2(r3, r4) 01:13:32 executing program 3: clock_getres(0x5, 0x0) [ 347.418000][T10468] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 347.471013][T10466] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 01:13:33 executing program 1: clock_getres(0x5, 0x0) 01:13:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r0, r1) 01:13:33 executing program 3 (fault-call:0 fault-nth:0): clock_getres(0x5, &(0x7f00000002c0)) 01:13:33 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x1402, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20805) write$binfmt_misc(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x14f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="edbfd8cf1a3d07b189011edbf6cb"], 0x16) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xfef0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setgid(r1) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000180)=0x32) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x3, &(0x7f0000000100)='vlan0\x00'}) [ 347.848113][T10479] dccp_invalid_packet: P.Data Offset(0) too small [ 347.867395][T10485] FAULT_INJECTION: forcing a failure. [ 347.867395][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 347.880313][T10485] CPU: 0 PID: 10485 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 347.889260][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.899531][T10485] Call Trace: [ 347.902918][T10485] dump_stack+0x1df/0x240 [ 347.907358][T10485] should_fail+0x8b7/0x9e0 [ 347.911891][T10485] __should_failslab+0x1f6/0x290 [ 347.917079][T10485] should_failslab+0x29/0x70 [ 347.921785][T10485] kmem_cache_alloc+0xd0/0xd70 [ 347.926654][T10485] ? __anon_vma_prepare+0xa5/0xae0 [ 347.931854][T10485] ? unwind_get_return_address+0x8c/0x130 [ 347.937682][T10485] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 347.943846][T10485] ? kmsan_get_metadata+0x11d/0x180 [ 347.949142][T10485] __anon_vma_prepare+0xa5/0xae0 [ 347.954185][T10485] ? kmsan_get_metadata+0x11d/0x180 [ 347.959481][T10485] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 347.965378][T10485] do_huge_pmd_anonymous_page+0x4ea/0x2aa0 [ 347.971238][T10485] ? kmsan_set_origin_checked+0x95/0xf0 [ 347.976842][T10485] ? kmsan_get_metadata+0x4f/0x180 [ 347.982007][T10485] ? kmsan_internal_set_origin+0x75/0xb0 [ 347.987721][T10485] handle_mm_fault+0x4b6b/0x9ff0 [ 347.992750][T10485] do_user_addr_fault+0xb74/0x1600 [ 347.997901][T10485] ? fsnotify+0x57b/0x2100 [ 348.002381][T10485] __exc_page_fault+0xdf/0x390 [ 348.007194][T10485] exc_page_fault+0x45/0x50 [ 348.011755][T10485] asm_exc_page_fault+0x1e/0x30 [ 348.016666][T10485] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 348.023047][T10485] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 348.042700][T10485] RSP: 0018:ffff9b4cc402bd90 EFLAGS: 00010202 [ 348.048826][T10485] RAX: ffff9b4cc402bd98 RBX: ffff98ea1fa62858 RCX: 0000000000000002 [ 348.056845][T10485] RDX: 0000000000000000 RSI: ffff9b4cc402be30 RDI: 00000000200002c0 [ 348.064856][T10485] RBP: ffff9b4cc402be00 R08: 0000000000000000 R09: ffff98eb2fffb000 [ 348.072882][T10485] R10: 0000000000000004 R11: ffffffff9f2c2260 R12: ffff9b4cc402be30 [ 348.080891][T10485] R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000000 [ 348.088939][T10485] ? posix_get_monotonic_raw+0x320/0x320 [ 348.094633][T10485] ? _copy_to_user+0x12e/0x1d0 [ 348.099462][T10485] put_timespec64+0x10f/0x1e0 [ 348.104195][T10485] __se_sys_clock_getres+0x1f9/0x3a0 [ 348.109552][T10485] __x64_sys_clock_getres+0x3e/0x60 [ 348.114816][T10485] do_syscall_64+0xb0/0x150 [ 348.119382][T10485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 348.125330][T10485] RIP: 0033:0x45c1d9 [ 348.129283][T10485] Code: Bad RIP value. [ 348.133376][T10485] RSP: 002b:00007f5a8f797c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e5 [ 348.141832][T10485] RAX: ffffffffffffffda RBX: 0000000000001e00 RCX: 000000000045c1d9 [ 348.149840][T10485] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 348.157882][T10485] RBP: 00007f5a8f797ca0 R08: 0000000000000000 R09: 0000000000000000 [ 348.165889][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.173899][T10485] R13: 0000000000c9fb6f R14: 00007f5a8f7989c0 R15: 000000000078bf0c 01:13:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x8, 0x4, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x0, 0x4}, {0xfffffffb, 0x6}]}, 0x14, 0x2) dup2(r3, r4) [ 348.599732][ C1] sd 0:0:1:0: [sg0] tag#1705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 348.610521][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB: Test Unit Ready [ 348.617251][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.627086][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.636907][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.646857][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.656671][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.666581][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.676370][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.686587][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xb}, @dev={0xfe, 0x80, [], 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x649f2bdb, 0x4, 0x66b5, 0x500, 0x9, 0x80500040, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) [ 348.696395][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.706203][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.716012][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.725831][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.735616][ C1] sd 0:0:1:0: [sg0] tag#1705 CDB[c0]: 00 00 00 00 00 00 00 00 [ 348.767494][ C0] sd 0:0:1:0: [sg0] tag#1706 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 348.778163][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB: Test Unit Ready [ 348.784935][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.794955][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.805052][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.815007][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.825261][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.835140][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.845059][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.854881][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:13:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:34 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012808b05000000000000006500000c00028006002700f00000021b412cac54d162b3a57460c6849c6c15afccf26bdf60d0cd5a529d81762f1ae435ff0b978e6701b3acd6c8666fd6b542dbfb234c27974faa0a164314aca91c37bf4a39064c3f1480fc4fd141f47ce6eba4d97f47b0d3104ef3c761f4434a1ba8aa6ab5daf14d4ce5193a99d0c83a0f009b35748387c97fe6ed909f21e6a32d19685bb455268796cb05218aa7d468ac16c0a18dc53fca6bf847ab2cfad5d6ec533a0f23ddc10bec9dec7c67ba10646c35"], 0x3c}}, 0x0) set_tid_address(&(0x7f0000000180)) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) write$apparmor_current(r5, &(0x7f0000000340)=@hat={'permhat ', 0x2, 0x5e, ['--:/\x00', '*[]\x00']}, 0x24) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r6, 0x309, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x814) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10c00, 0x21) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x31}, {r0, 0x1183}, {r1, 0xa621}, {r2, 0x400}, {r3, 0x20}, {r4, 0x200}, {r7}], 0x7, &(0x7f0000000100), &(0x7f0000000140)={[0x7fff]}, 0x8) [ 348.864900][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.874815][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.884812][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.894640][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 348.904616][ C0] sd 0:0:1:0: [sg0] tag#1706 CDB[c0]: 00 00 00 00 00 00 00 00 [ 349.095453][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.151533][T10503] dccp_invalid_packet: P.Data Offset(0) too small 01:13:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r8, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000854) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 349.849131][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.960676][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:13:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x3a1140, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000000c0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000140)=""/79) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r5) 01:13:35 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 01:13:35 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x430800, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000000)) 01:13:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:36 executing program 1: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012808b05000000000000006500000c00028006002700f00000021b412cac54d162b3a57460c6849c6c15afccf26bdf60d0cd5a529d81762f1ae435ff0b978e6701b3acd6c8666fd6b542dbfb234c27974faa0a164314aca91c37bf4a39064c3f1480fc4fd141f47ce6eba4d97f47b0d3104ef3c761f4434a1ba8aa6ab5daf14d4ce5193a99d0c83a0f009b35748387c97fe6ed909f21e6a32d19685bb455268796cb05218aa7d468ac16c0a18dc53fca6bf847ab2cfad5d6ec533a0f23ddc10bec9dec7c67ba10646c35"], 0x3c}}, 0x0) set_tid_address(&(0x7f0000000180)) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) write$apparmor_current(r5, &(0x7f0000000340)=@hat={'permhat ', 0x2, 0x5e, ['--:/\x00', '*[]\x00']}, 0x24) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r6, 0x309, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x814) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10c00, 0x21) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x31}, {r0, 0x1183}, {r1, 0xa621}, {r2, 0x400}, {r3, 0x20}, {r4, 0x200}, {r7}], 0x7, &(0x7f0000000100), &(0x7f0000000140)={[0x7fff]}, 0x8) 01:13:36 executing program 3: clock_getres(0x6, &(0x7f0000000000)) 01:13:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$cont(0x9, r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0xfff9]}, 0x6) fcntl$setown(r3, 0x8, r4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r5) [ 350.909404][T10555] dccp_invalid_packet: P.Data Offset(0) too small 01:13:36 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000001e9a01510a71e31246e859c7067a0976379a062242ffd2cc2a0907b51fb9398fda000000", @ANYRES32=0x0, @ANYBLOB="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"]) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x0, 0x97, 0x0, 0x0, 0xf33, 0xfffffff8, 0x4, 0x4, 0x101, 0x101, 0x0, 0xf78, 0xfffff801, 0x1, 0x9, 0x18, {0x0, 0x10001}, 0x7f, 0x7}}) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x14) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000300)=[{&(0x7f0000000140)="04bd99fd439719cc92d7ad9ad1f5a77dad587d0c984fe82951ba4c8fa64b6c2cdf54611640ff8b27e1b972993c87889746698909d0cbde2710f9e97d42493b11e7f1dfbcba03ce1aa714c77128a9da733ae4ddfa58aedaf294abe95604f1d74ddd42261daa37de2e79f79f6954f767d176235fc9f4ff40fb620e53e269062280cb464202f198adb7590af28e72e7f829f90c0a7b838aaf351572ec1ff975bba4d18a1095312d4d576301550b7df23b427ca1d1c3cac591c8261cedd378f4ee210892bd3aa035569ee3ddd2ff237f722927453634f8c46612a73b6e243ee83a95e403d11bf659a49bb24bf66b", 0xec}, {&(0x7f0000000340)="427e9105abc6d25261c50199543e7e4641ef673e9e270d65a318a7d667bdadd67e78686e71a3156d2ba2f8a12afe298cbdaa6c093033ee6c2b155b300ed067ff3cbf84467b8ae5f75affc1aa757b4e03460d1e95ccfb25ad4ea3a3fbb90075532d5e2212256fbf57647379951ec7799f09d38e5366e4397fe00f5cbfbf4841c34c7ab0ac0572819e321a1a2d3d4b5339c021a2c8f9bffd066bf0e3eddc8adce0f7e32a30a0f4b471213796156218d7be62c712a2998181e78d00a0f64b354cbb7046a046ff13d07ef187ae4db19b33b9b59ad5b03917a377d0", 0xd9}], 0x2, r2) 01:13:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getroute={0x14, 0x1a, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x440c0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mq_timedsend(r7, &(0x7f00000000c0)="8cfdb8d3732f8d66b8e6f46b2784952a88d1cf1e0a0e913024f14b0c62e4bcb403674706730aa9ef7d416229b03b3ea64ed6d3c7e488b631d7e82d01795c4171a6b6c64d8e8f616713f10adef7d659899e1ca9e493937297dc9ccedbcc938c9f42ae2841f0217c024c0c19c67b1c0238060567ea0e242c0d6b85dd0aef7e13bacbaa147646147fe89e9f125c69af0df23e42749da15f522afafb99d48615", 0x9e, 0x1, &(0x7f0000000040)={0x0, 0x989680}) [ 351.600476][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:37 executing program 3: clock_getres(0x1, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gretap0\x00', 0x4}, 0x18) 01:13:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/349], 0x8c}, 0x1, 0x0, 0x0, 0x2004c884}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 01:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x80000000}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 351.983142][T10592] dccp_invalid_packet: P.Data Offset(0) too small [ 352.015165][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.057118][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000040)=""/34) 01:13:37 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000080)=0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000380)={r6}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={r6, @in={{0x2, 0x4e21, @empty}}}, 0x84) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000400)={'vlan0\x00', {0x2, 0x4e21, @broadcast}}) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000003100050ad25a80648c6394fb0124fc00313fa8ee49aefe9c5fb6da1c041000f53f0ac3020305000000c1", 0x2e}, {&(0x7f00000000c0)="462c58d3542dd7a3bc0977e218f1032a448c6a70d69036dbf1e54a58c52793c39a9ced0559a8e2cb718665f9e62421cf1cf3bd45061f8597c5e4d0d9bcc8e2a98f708e627413720b0eb1537ae07c59c1717de6d2a33db60402fcea446016cc2c1adb09b26f5da6139d3a99f764850619c3cdd3ff48d303bdc58f11f3fe482535652f0972eebaa859c6c67a349b8d9c2a5ec2de7076217b23505d3fd62271f7f3452733f41f6ef8ab72a01bd79b8da29585665c99a5bcf1fded52", 0xba}], 0x2}, 0x40400d1) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000200)=0x6e, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendto(r8, &(0x7f00000005c0)="11459d09af20bdc272e28fe1a2de3df85e22a353dea3d7301b0926edb445a30ccc576535cca4cfcd6587bd822e5d840b7c5c346f4dc0603245aca0b131af4ca370a87e582fd75a192c64e757c18c2f2cf2df42b5361fccc9ceb23ff9b3022d8b7ca3d680c68653441385a95f7bb4c1c48f58062bab4d160931e9e3c8735132afb6060660c4398bcbe9e80cb9253adf8adbcc45", 0x93, 0x800, &(0x7f0000000680)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="a03c596ce7dda98d89b401f7c03c81348b44421b49fc25d9b059a7a53b6cc6382417d9d06aaab68bf06223e14cbc844ee2161c6766672c5f4b3f", 0x3a}, {&(0x7f00000002c0)="6854f5be8027d3cea97cda498e9c51ae10bf391628cff1db29c7f6df8fce73328262ea70be69566d6755ebe49dad4a4e5d1f47db7abda60a96954ec12ba12d65d952787e9bd96439bbae99a13aceea08a44f69d6c2a987ed98ad05d3", 0x5c}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x200000d4) [ 352.523362][T10612] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 4, id = 0 01:13:38 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') statx(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x800, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x23480010}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}]}, 0xcc}}, 0x0) 01:13:38 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100) r2 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x600800, 0x20}, 0x18) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}}, 0x240000d0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x602801, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000002c0)) write$nbd(0xffffffffffffffff, &(0x7f0000000300)={0x67446698, 0x1, 0x1, 0x3, 0x3, "99c0f83106e4e4579b9bb758dd090c66d3955180b37d003f45efb5a63b271a67d2697a07c23dad90379c2774c93ca8286cab16b64bfb92854cbfdc4f1ae1b41e070def2f43916ef5ee398082ce4c9e3262c6d422e6bce990bd6393e74882e19ff1582bcc4c849c4f492c52e88b4f82b7971eafe4254a227687fbd2f0be8803c4d8a95e990ada549dabc8f90abfbcee5171abc2d3643c7e57"}, 0xa8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000400)='ns/pid_for_children\x00') prctl$PR_MCE_KILL_GET(0x22) r7 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000440)='fscrypt-provisioning\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)={0x1, 0x0, "b1c83e5e764b00768342e45cb9c09d2de2b0eede6e98a9180fac26c57fa92c6ac364d8cb603fb0326f264bad473e85d65731892a19079a997a45b5d8267cbc8cd2311881a7b10508cc450bc10dfd076e3d48f05c97d7e6fa154ace56c459ecf6e486915d27bdc6fd2c622d21ec8b5150249926473f9fe1593bdd3626f75884cca7981684a0c20953c05cb306c3d9e3d15bbc480c0a53852489f10490e9f2720b2745182aff1111537069c092ac3a0b917e97ef0b6405d0d674ad8bb0bdbd55bec5185d6eda8551f6d04c"}, 0xd2, r7) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000640)={{0x855c, 0x5}, 0x1d}, 0x10) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000680)=0x200000000000) 01:13:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:38 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 352.912432][T10626] dccp_invalid_packet: P.Data Offset(0) too small 01:13:38 executing program 3: clock_getres(0x4, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x410100, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001440)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001480)=ANY=[@ANYBLOB="9c030000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x39c}, 0x1, 0x0, 0x0, 0x24040810}, 0x4001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') 01:13:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:39 executing program 3: clock_getres(0x4, &(0x7f0000000000)) 01:13:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r10, r11) [ 354.497080][T10655] IPVS: ftp: loaded support on port[0] = 21 01:13:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) 01:13:40 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffc0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c090}, 0x4014) clock_getres(0x5, &(0x7f00000002c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x8, 0x400) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x8000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x80, 0x4) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) poll(&(0x7f0000000180)=[{r2, 0x92c4}, {r0, 0x1000}, {r4, 0x350}, {r6, 0x29ca41f41cc47237}], 0x4, 0x749) 01:13:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:40 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 01:13:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x5000, 0x3000, 0x94, 0xdb, 0x5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r2, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x3) r8 = dup2(r0, r1) write$snapshot(r8, &(0x7f0000000040)="1be3ae344ccf98a17ef528b740a6026096388b4dfe689bfb8802be066f876925751aaae0aab65a5bedfc7a30daccdc09165be8af08a965", 0x37) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) [ 355.745673][T10655] chnl_net:caif_netlink_parms(): no params data found [ 356.197539][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.205914][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.215461][T10655] device bridge_slave_0 entered promiscuous mode [ 356.273695][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.281117][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.290887][T10655] device bridge_slave_1 entered promiscuous mode [ 356.429096][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.477417][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.542799][T10655] team0: Port device team_slave_0 added [ 356.554008][T10655] team0: Port device team_slave_1 added [ 356.629547][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.637456][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.663653][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.701785][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.708976][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.735190][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.851200][T10655] device hsr_slave_0 entered promiscuous mode [ 356.901238][T10655] device hsr_slave_1 entered promiscuous mode [ 356.944467][T10655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.952093][T10655] Cannot create hsr debugfs directory [ 357.257771][T10655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.348865][T10655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.437958][T10655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.511508][T10655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.742365][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.778737][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.787754][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.808681][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.836330][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.846780][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.856136][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.863320][ T8943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.891293][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.900390][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.910632][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.920227][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.927670][ T8943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.976803][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.988002][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.999348][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.010360][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.052189][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.061980][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.072754][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.083045][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.092630][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.102094][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.111637][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.128283][T10655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.200318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.208138][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.228404][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.293766][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.303820][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.359218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.369592][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.392220][T10655] device veth0_vlan entered promiscuous mode [ 358.411613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.420789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.443088][T10655] device veth1_vlan entered promiscuous mode [ 358.512484][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.523228][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.532717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.542374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.560109][T10655] device veth0_macvtap entered promiscuous mode [ 358.590401][T10655] device veth1_macvtap entered promiscuous mode [ 358.641750][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.652314][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.662467][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.674063][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.684025][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.694568][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.704767][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.716120][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.729869][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.746657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.756042][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.765826][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.775769][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.793385][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.804127][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.815297][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.825816][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.835757][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.846269][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.856215][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.866735][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.880748][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.890768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.902483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:13:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000040)=""/34) 01:13:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000494c96b37075000058af46d10010000104000000e9eaffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006002700f0000000"], 0x3c}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000200)={0x3f0004, 0xfffffff9, 0xa9, r6, 0x0, &(0x7f00000001c0)={0x9909da, 0x5, [], @p_u16=&(0x7f0000000180)=0x7fff}}) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f0000000240)) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) dup2(r8, r9) 01:13:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r10, r11) 01:13:44 executing program 3: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRESHEX, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="252f00200000000800000080421d008800640000032f9078ac1414bbac1e010194040100070f91ac1414bb7f000001ac1e0001892ad8ffebffff0a010100ac1414aa6401010286ced35bde235ed2e4082fcfd64c0000000007080aca4e5d8fa7000cf7d0f7c938e7451b8d47180e3ae5d7b369df7642a6b6fe9101042f9c0107b6739f0f7a000d90bfc78635b73801c8a5c9050c3d3c11c1ac158dc512fd0000adbadf92db2d794125ab41741d5795f678"]}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) clock_getres(0x5, &(0x7f00000002c0)) [ 359.451028][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.523854][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:13:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r10, r11) [ 359.647261][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 01:13:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x19, 0x100, 0x8, 0xd, 0x2d2, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1000}, 0x40) r2 = dup2(r0, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r5, 0x1f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) 01:13:45 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000000c0)={0x9, 0x7ff, 0x5, 0x54, &(0x7f0000000000)=""/84, 0x1000, &(0x7f0000000300)=""/4096, 0xd, &(0x7f0000000080)=""/13}) 01:13:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r3, 0x0, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000040)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '/dev/sequencer2\x00', 0x20, 0x1ff}, 0x38, r3) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r5, r6) 01:13:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r10, r11) 01:13:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000040)=""/34) 01:13:45 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000580)=""/4096) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r7, @ANYBLOB="200028bd7000fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x1) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3e, r3}) 01:13:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0xff, 0x1, 0x4, 0x2, 0x0, {}, {0x2, 0x1, 0x1f, 0x3, 0x7f, 0x1, "b8f6ea9c"}, 0x5, 0x4, @fd, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x905, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0x80, 0x7f, 0x5, 0x0, 0x8, 0x8001, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x200, 0x1f, 0x465b, 0x2, 0x3, 0x2, 0x7}, 0x0, 0x4, r7, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r8, 0x8001) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r9) 01:13:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r10, 0xffffffffffffffff) [ 360.598117][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.669756][T10962] QAT: Invalid ioctl 01:13:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socketpair(0x26, 0x1, 0x735, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x1f, 0x5, 0xf7}, {0xf62f, 0x0, 0x1, 0x8001}, {0x0, 0x4, 0x4, 0x4}, {0xfd33, 0x9, 0x1, 0x8}]}, 0x10) r4 = dup2(r1, r2) setsockopt(0xffffffffffffffff, 0xbd38, 0x6, &(0x7f0000000280)="923d56aa772a1e36f69a3c452def1d55317e61ccc0268a0ad31b57e21c2c2567815b214a27af837507f3f4e10642ed046afe7ff5438a119debf7775ca8626a1d5bc0895d4099d46cac76472206177d7b699a1d739c29964e5165575f0dcf6c42d085d8831422b30ef9aa613032176752e7fe5be8ed847bd09bbbb042d14fd63f7afdecb51d75c5bbbb520b754d81a7970f02409bd9032c803d0fac72c2d844ed4c47c483de8fddbc099463a425b3a65fb60c3b0be8fb16d7b468a1ab3af4218268f2f6a69f115f308bb3638ef3fcfedd7ae596237510d5f9a80659199811d4c15b1d4d1595fc687206b348c85058234ec13484fa8ef7caf0", 0xf8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x600900, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000200)=0x2, 0x4) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000040)={0x4, 0x3, 0x200}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x1, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x8000000, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) r7 = dup2(r0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r8, r9) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x20800, 0x0) 01:13:46 executing program 3: clock_getres(0x7, &(0x7f00000002c0)) 01:13:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r10, 0xffffffffffffffff) 01:13:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) dup2(r4, r3) 01:13:46 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 01:13:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) dup2(r10, 0xffffffffffffffff) 01:13:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000040)=""/34) 01:13:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) clock_getres(0x5, &(0x7f00000002c0)) 01:13:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(0xffffffffffffffff, r10) 01:13:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x9, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e20, 0x1, @loopback}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={r6, 0xfff, 0x30}, &(0x7f0000000340)=0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40a00, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x140c, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r10, r11) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r10, 0x4018f50b, &(0x7f0000000040)={0x0, 0x5}) 01:13:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:47 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x0, 0x80, 0x6, 0x5, 0x0, 0x7}) clock_getres(0x5, &(0x7f0000000000)) 01:13:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(0xffffffffffffffff, r10) 01:13:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x80000004, 0x4, 0xd, 0x243, 0xffffffffffffffff, 0x0, [], 0x0, r3}, 0x40) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) 01:13:47 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 01:13:47 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000040)={0x7, 0x40, 0x9, 0x9, 0x9, 0x8}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(0xffffffffffffffff, r10) 01:13:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:48 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x2, 0x0, 0x7}}) 01:13:48 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="fb6a53d28dff24f6b0c80ff22000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140c0500c2906355d86aa8bffd3748e4ab0677633e67a2804ed58360df2d58a19c25dc1609707475f6e605d8d754d5adafa5473972847a413aaebbbdd15c9edba6f8ba7c5cbd1a201044e6"], 0x20}}, 0x490c2) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r10, r11) 01:13:48 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0xcb, 0xffffffff}}) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x0, 0x2, {0x0, 0x0, 0x7ff, 0x3ff}}, 0x20) 01:13:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x25bb5996977a746d, 0x0) dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = semget$private(0x0, 0x1, 0x0) semop(r5, &(0x7f0000000080)=[{0x0, 0xc000, 0x800}], 0x1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000040)=[0x102]) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000040)=[0x81]) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r7 = geteuid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r6, 0x0, r7, 0xffffffffffffffff, 0x0, 0x3}, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfff}) r8 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000600)="31a8a74c68e0576d9cd0c4741a0f6839f84fc6baa465a3f1153fbe538f25a929d282536660351a3581028e66de385e10e131124fe3f5ba72073e2d3c3f96cfb6d13ca9b9c6d5a0fee2b32c81839ef87b1843cf32bb270e925b79761d84da87242cd3d97cf159acc29f558ec395850eaaaa9061726fb30646066dd00503f0eec9f7c956570dddedbf0e6692cbf6427e52855de62360ab42e3", 0x98}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179d501000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9012169d0c"], 0xa8}], 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x7, 0xd0, 0x92dc, 0x2, {0x1, 0x6, 0x5, 0x3ff, 0x101, 0x0, 0x1, 0x9, 0x4a5, 0x2, 0x8, r7, r9, 0x9}}, {0x0, 0x1}}}, 0xa0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x420000, 0x0) 01:13:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xfffffffffffffff9) clock_getres(0x5, &(0x7f00000002c0)) 01:13:48 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x80000000}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x46067035}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x39}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4015}, 0x20000004) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x20382, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000280), 0x4) 01:13:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r9, r10) 01:13:49 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x9, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r3, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x6, 0x0, 0x8, 0x1bd2, 0x1, 0x9, 0xff}, &(0x7f0000000100)=0x9c) clock_getres(0x5, &(0x7f00000002c0)) 01:13:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) r5 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x490103, 0x0) dup2(r6, r7) 01:13:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) 01:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r9, r10) 01:13:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f0000000100)={0x5, 0x800, 0x1}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000040)=0x1) dup2(r3, r4) 01:13:49 executing program 3: clock_getres(0x3, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 01:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r6, 0x0, [], 0x0, r3, 0x40}, 0x40) dup2(r0, r7) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r8, r9) 01:13:49 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000080)='*\x00', 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x1400, 0xf}, 0x40) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 01:13:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x7ff, 0x10, 0x708, 0xffffffffffffffff, 0x5, [], 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r5, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000000c0)={0x137c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b1f07df}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x532}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x11bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa8, 0x3, "a1b44ed6bbad975f90fd6cd6978b4fdae9e917cb70e94b5c1535172edf3fe004d899efe1a5d5eb4ccb0653a43388c1f732ef67bcdf07b3f1c0b7e0cf138f6fa096cd6a4e6242622dae98ef7b0214fe61641e4719b73faf218abdb1640554a2eaa068a30b5989c6f4a5c262b94b2537df66dc96b6ba2b9d26fbd16055a9f9922e19d3ddeee3002bf2a00b9394a5fb51a7eb327b164ed7a475071349706364754732000e89"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "937b63e11360f0455cc635fb224d198b5152ed0b15236cca8cfe4c92f2024bc2a28955"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "bcbb52e5ed2f48ccc8d1140ab333eaae0a2f69cad944f6ca8f720adcb2d38f702b77cabd172158c95fb5172c097aa852906a2317e6b25b17921d767dbb32c3d3d4a57ecd0385e91d07d121cb558b27de77406c9f4aa1f0f031a3bfe203480a61a15585eb262758130fd89b9d779eb83f8f72f0ffb794874a7e75a69075443fabffc46c95bcdc5374f1a53b0962b19f060be4362f1b18c8f7954307f8c50c7eaf3c2c3917fd059d0390c264"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc11a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x55}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff4b09}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r7 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r8, r9) 01:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x3, 0xd, 0x0, r5, 0x0, [], 0x0, r2, 0x40}, 0x40) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r6, r7) [ 364.627727][T11099] tipc: Started in network mode [ 364.632973][T11099] tipc: Own node identity 00000000000000000000ffffac1e0001, cluster identity 4711 [ 364.642794][T11099] tipc: Enabling of bearer rejected, failed to enable media 01:13:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) 01:13:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r6, r7) 01:13:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r6, r7) 01:13:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) dup2(r3, r4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r5, r6) 01:13:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) 01:13:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) dup2(r3, r4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r5, r6) 01:13:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:13:52 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000002840)='/dev/input/mice\x00', 0x200000) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000012000c000900766574680000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002900)={'syztnl2\x00', &(0x7f0000002880)={'ip6_vti0\x00', r8, 0x4, 0xfa, 0x40, 0x0, 0x6, @mcast1, @empty, 0x7800, 0x40, 0x80, 0x41}}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x4c}}, 0x20040000) 01:13:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x4f}, 0x8) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:13:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x3f00, 0x0, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 367.192081][T11152] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:13:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) [ 367.308251][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:13:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x94, 0xffffffffffffffff, 0xfffffffd, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:13:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r0, r1) 01:13:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r0, r1) 01:13:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r0, r1) 01:13:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:56 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:56 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:57 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x426200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041080}, 0x200080d1) r1 = dup(0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000180)={0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/fscreate\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4851) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa4, r8, 0x223, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8a, 0x3, "15f25588a82e14491da4ab37ed42d089490c84dde23b9b2cd5f8a6f29210962504297160125b616a1d45676e63222f223c4b5de740e71deab7ccd93a3067327658a68cdd6508f47b8139556a0dc3d82c24332299c7cea602f84908c80d7a889f98cd4a1d41b6e44d247674394d125bd0e0ce481aabb10c5f73e2715f0057995273545c3ef868"}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008011}, 0x40000) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00)='ethtool\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000b40)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r10, 0x322, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffffff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd6f1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x16d}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000801) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x7) 01:13:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:13:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:13:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) [ 372.580990][T11300] dccp_invalid_packet: P.Data Offset(0) too small 01:13:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 373.147564][T11313] IPVS: ftp: loaded support on port[0] = 21 01:13:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:13:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) [ 373.752824][T11313] chnl_net:caif_netlink_parms(): no params data found [ 374.094542][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.101757][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.111680][T11313] device bridge_slave_0 entered promiscuous mode [ 374.203862][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.211075][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.220845][T11313] device bridge_slave_1 entered promiscuous mode [ 374.316780][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.336040][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.450494][T11313] team0: Port device team_slave_0 added [ 374.469600][T11313] team0: Port device team_slave_1 added [ 374.523399][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.530636][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.557642][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.574584][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.581625][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.608527][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.732129][T11313] device hsr_slave_0 entered promiscuous mode [ 374.764788][T11313] device hsr_slave_1 entered promiscuous mode [ 374.803678][T11313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.811392][T11313] Cannot create hsr debugfs directory [ 375.102962][T11313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 375.148054][T11313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 375.200813][T11313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.257729][T11313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 375.388240][T11313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.420033][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.428331][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.449239][T11313] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.462415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.472237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.481509][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.488807][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.527930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.536921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.546719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.555893][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.563080][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.572018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.582832][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.592815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.603162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.613148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.623612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.641754][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.651167][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.660661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.677882][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.687304][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.702141][T11313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.738182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.746054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.773939][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.804272][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.813848][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.851653][T11313] device veth0_vlan entered promiscuous mode [ 375.860272][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.869370][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.901296][T11313] device veth1_vlan entered promiscuous mode [ 375.909825][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.918298][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.927097][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 375.979476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 375.988129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.997864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.015413][T11313] device veth0_macvtap entered promiscuous mode [ 376.035197][T11313] device veth1_macvtap entered promiscuous mode [ 376.067363][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 376.078076][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.088098][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 376.098638][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.108609][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 376.119142][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.129194][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 376.139753][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.149803][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 376.160394][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.174268][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.186810][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 376.196529][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 376.205874][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.215773][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.236729][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 376.247251][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.257637][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 376.268375][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.278367][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 376.289294][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.299297][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 376.309861][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.319886][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 376.330484][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.344330][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.359104][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.369488][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:14:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x0, 0x250, 0x250, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x3, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'team_slave_1\x00', 'nr0\x00', {}, {}, 0x87}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x9}}}, @common=@mh={{0x28, 'mh\x00'}, {"c7fd"}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'team0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 01:14:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) prctl$PR_MCE_KILL_GET(0x22) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0xfffffffffffffdb4, 0x0) clock_getres(0x5, &(0x7f00000002c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRESDEC=r4], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002d077000ffdbdf25040000000800020004000000080012000200000000fc8b07493bc057c3706b"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) 01:14:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x6}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000007", @ANYRES16=r6, @ANYRES64=r7], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x20004011) dup2(r3, r4) [ 376.832082][T11555] Cannot find add_set index 0 as target [ 376.922803][T11564] Cannot find add_set index 0 as target 01:14:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:02 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) ioprio_get$pid(0x2, r0) clock_getres(0x5, &(0x7f00000002c0)) 01:14:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x0, 0x250, 0x250, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x3, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'team_slave_1\x00', 'nr0\x00', {}, {}, 0x87}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x9}}}, @common=@mh={{0x28, 'mh\x00'}, {"c7fd"}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'team0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 01:14:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) [ 377.327434][T11571] dccp_invalid_packet: P.Data Offset(0) too small 01:14:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 377.485488][T11582] Cannot find add_set index 0 as target 01:14:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xff) 01:14:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x0, 0x250, 0x250, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x3, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'team_slave_1\x00', 'nr0\x00', {}, {}, 0x87}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x9}}}, @common=@mh={{0x28, 'mh\x00'}, {"c7fd"}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'team0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 01:14:03 executing program 3: clock_getres(0x4, &(0x7f00000002c0)) 01:14:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) [ 378.492676][T11610] dccp_invalid_packet: P.Data Offset(0) too small [ 378.504215][T11613] Cannot find add_set index 0 as target 01:14:04 executing program 3: clock_getres(0x4, &(0x7f00000002c0)) 01:14:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f0, 0x0, 0x250, 0x250, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x3, 0x0, {[{{@ipv6={@dev, @loopback, [], [], 'team_slave_1\x00', 'nr0\x00', {}, {}, 0x87}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'ip_vti0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x9}}}, @common=@mh={{0x28, 'mh\x00'}, {"c7fd"}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'team0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 01:14:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000380)=0x8, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clock_getres(0x5, &(0x7f00000002c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000026747e193a1217f9b8984e7fff2b62ff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006002700f0000000"], 0x3c}}, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1, 0x1ff) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0x7) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/213, 0xd5, 0x9e5) [ 378.947922][T11627] Cannot find add_set index 0 as target 01:14:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:04 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="08000300240d0000"], 0x44}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x121080, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x2000004, 0xd, 0x0, r4, 0x0, [], r3}, 0x40) r6 = dup2(r0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_ifreq(r4, 0x8921, &(0x7f00000000c0)={'veth1_vlan\x00', @ifru_mtu=0x1}) accept4$phonet_pipe(r6, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) 01:14:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100200333b31213b8f67f0720e4dfbea954e000000000000000000000000ff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3f, 0x0, 0x0, 0x0, "8327e1b22b5fcef700580f02000000003f420f000000000000580f02000000004ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b4f"}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14048010}, 0x4004891) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/11) 01:14:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 379.734629][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) [ 380.286674][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100200333b31213b8f67f0720e4dfbea954e000000000000000000000000ff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3f, 0x0, 0x0, 0x0, "8327e1b22b5fcef700580f02000000003f420f000000000000580f02000000004ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b4f"}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14048010}, 0x4004891) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/11) 01:14:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:05 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/198) 01:14:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) [ 380.772632][T11685] dccp_invalid_packet: P.Data Offset(0) too small 01:14:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x8001, 0x6}) clock_getres(0x5, &(0x7f00000002c0)) 01:14:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100200333b31213b8f67f0720e4dfbea954e000000000000000000000000ff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3f, 0x0, 0x0, 0x0, "8327e1b22b5fcef700580f02000000003f420f000000000000580f02000000004ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b4f"}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14048010}, 0x4004891) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/11) 01:14:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100200333b31213b8f67f0720e4dfbea954e000000000000000000000000ff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3f, 0x0, 0x0, 0x0, "8327e1b22b5fcef700580f02000000003f420f000000000000580f02000000004ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b4f"}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14048010}, 0x4004891) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/11) 01:14:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x8000, 0x40, 0x3, 0x401, {{0x1e, 0x4, 0x2, 0x0, 0x78, 0x65, 0x0, 0xfc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, {[@lsrr={0x83, 0x7, 0xc9, [@local]}, @cipso={0x86, 0x59, 0x3, [{0x5, 0x3, '@'}, {0x2, 0x10, "20e2bc232c4860500615f58302d9"}, {0x6, 0x4, 'b\t'}, {0x2, 0xd, "67745a4fdfabe064643081"}, {0x2, 0xf, "73b1f3a8a66b76f7640fa7cbfb"}, {0x0, 0xc, "789f50cd8018aa1844ce"}, {0x7, 0xd, "2b47ba66bc1cdf557e282f"}, {0x5, 0x7, "0baec8c544"}]}, @noop]}}}}}) clock_getres(0x5, &(0x7f00000002c0)) 01:14:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 382.010282][T11716] dccp_invalid_packet: P.Data Offset(0) too small [ 382.086294][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 382.747692][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:08 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 01:14:08 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0xb6d7, 0x5, 0xd8b241085bb69c0f, &(0x7f0000ffb000/0x2000)=nil, 0x7}) [ 383.188082][ C1] sd 0:0:1:0: [sg0] tag#1680 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 383.198738][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB: Test Unit Ready [ 383.205528][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.215371][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.225219][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.235158][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.245027][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.254863][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.264705][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.274646][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.284484][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.294309][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.304151][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.313991][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 383.323831][ C1] sd 0:0:1:0: [sg0] tag#1680 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:08 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 383.434255][T11752] dccp_invalid_packet: P.Data Offset(0) too small 01:14:09 executing program 3: clock_getres(0x5, &(0x7f0000000000)) 01:14:09 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:09 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) [ 384.337560][ C1] sd 0:0:1:0: [sg0] tag#1681 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 384.348170][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB: Test Unit Ready [ 384.354992][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.364836][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.374697][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.384511][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.394350][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.404344][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.414177][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.424013][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:14:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) [ 384.433837][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.443687][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.454185][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.464542][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 384.474414][ C1] sd 0:0:1:0: [sg0] tag#1681 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:10 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 01:14:10 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 385.421098][ T32] audit: type=1800 audit(1595034850.881:11): pid=11771 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.current" dev="sda1" ino=15759 res=0 [ 385.503532][ C1] sd 0:0:1:0: [sg0] tag#1682 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 385.514170][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB: Test Unit Ready [ 385.520781][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.530640][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.540494][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.550339][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.560180][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.570018][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.579858][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.589684][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.599553][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.609423][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.619274][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.629108][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 385.638939][ C1] sd 0:0:1:0: [sg0] tag#1682 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:11 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = dup2(r3, r1) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='](@!!$\x00', 0x0, r5) 01:14:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:11 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 01:14:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x100, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x3, 0x40, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c090c, 0x40, [], @value=0x5a}}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000007", @ANYRES16=r6, @ANYBLOB="010027bd03004331edde66eeafbb426341d85680dde2b8a7c2554d9fb48716e2a4e638e68f2e2be394c6a5ac360000fefc027f6e59987e1cae5e12023d68f88205fef37804944d04ebacd914cf6dc47be7ad2c18bb3553281cc22ee9927389369e7140c9c3bc51d7087ec9d580364ba8ab17828b659a9afd0124aaf0846d84314acd7811d816ee53af59c0d93e4e5ab87f70e3"], 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="200026bd7000fbdbdf25020000000800010003000000080001000000000008000200020000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r7 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r11 = dup2(r9, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r11, 0x6, 0x1e, &(0x7f0000000040)=0x4, 0x4) dup2(0xffffffffffffffff, r8) [ 386.060387][ C0] sd 0:0:1:0: [sg0] tag#1683 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 386.071037][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB: Test Unit Ready [ 386.077782][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.087704][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.097607][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.107454][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.117300][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.127149][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.137020][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.146847][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.156675][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.162075][T11797] dccp_invalid_packet: P.Data Offset(0) too small [ 386.166525][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.182731][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.192577][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 386.202420][ C0] sd 0:0:1:0: [sg0] tag#1683 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:12 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 01:14:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xa58, 0x400040) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x101100, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={r8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={r8, 0x1}, 0x8) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x8000, 0x0) [ 387.420056][ C0] sd 0:0:1:0: [sg0] tag#1690 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 387.430720][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB: Test Unit Ready [ 387.437446][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.447284][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.457086][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.466909][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.476727][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.486565][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.496382][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.506309][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:14:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r2, r3) 01:14:13 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd7, &(0x7f0000000140), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendto(r0, &(0x7f0000000000)="7a0afb2bedc82f8042a648b50583ac7991227f0f7bdad7034bf6444c28f88d9de799a1a557321c4950eb090ece3c4f85576487538ca7eb2d6772974c5593f3f3f37434893e2fa408b2987ae6da0afa58e7f0b0b03151d68523aefbf2e57fde4df6518fcdc95a4c2f5cd505ff55298d5334cde4c68bb58638720fbb139c90e762f2c19f5d5f9837344cfeea9dfe2fa6fc371e3c1a9dd6cfb709c493013e90c44bd7b5523ab622e004bc274ca74d514082c356eb70c0070b3972a4bd40da9e4bb54112eee59ec558b08e959561b6380c64a2a188fc6d0ecfa5fedd8a43773dad3d44c2b61b0bd38741a438238777400402b157", 0xf2, 0x80, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x2, 0x1, 0x0, 0x4}}, 0x80) [ 387.516139][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.525956][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.535840][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.545709][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 387.555590][ C0] sd 0:0:1:0: [sg0] tag#1690 CDB[c0]: 00 00 00 00 00 00 00 00 [ 387.941324][T11857] Unknown ioctl 19305 [ 388.032504][T11864] Unknown ioctl 19305 [ 388.038599][T11859] dccp_invalid_packet: P.Data Offset(0) too small [ 388.231507][ T32] audit: type=1800 audit(1595034853.691:12): pid=11842 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.current" dev="sda1" ino=15759 res=0 01:14:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_int(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4}, 0x40) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000280)=""/49) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)) timerfd_settime(r1, 0x0, &(0x7f00000001c0)={{r6, r7+60000000}, {0x77359400}}, &(0x7f0000000200)) time(&(0x7f0000000140)) dup2(r4, r5) 01:14:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000140)={0x9d0000, 0x2, 0x70b0, r2, 0x0, &(0x7f0000000100)={0x9a0914, 0x6, [], @p_u8=&(0x7f00000000c0)=0xa3}}) dup2(r3, r4) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x100, 0x1000) 01:14:13 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 01:14:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:14 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 01:14:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000000c0)={0x5, @capture={0x1000, 0x1, {0x0, 0x8001}, 0x1, 0x1f}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) 01:14:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) [ 388.930614][ C1] sd 0:0:1:0: [sg0] tag#1691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 388.941242][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB: Test Unit Ready [ 388.947971][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.957775][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.967593][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:14:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:14 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsmount(r2, 0x0, 0xf2) 01:14:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) [ 388.977385][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.987192][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 388.996994][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.006792][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.016599][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.026484][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.036296][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.046197][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.055997][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 389.065781][ C1] sd 0:0:1:0: [sg0] tag#1691 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r2, r3) [ 389.403998][T11903] dccp_invalid_packet: P.Data Offset(0) too small 01:14:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:15 executing program 0: r0 = gettid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20200, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0xd070ddf3264fcc6f, 0x5, 0x3, 0x7, 0x7f, 0x79, 0x8001, 0x9}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r5, r6) 01:14:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:15 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 01:14:15 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], r3, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x40) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) futimesat(r6, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{}, {0x0, 0xea60}}) r7 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x18002, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r9, 0x0, 0x0, 0x4}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b30d4c18759e108b29527b0cce6a1f085ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a8df3618e18c6a994b6d6e03cda01f573af6c3704906f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa702f60514b3992d5373036825bb0807b8590317abdf4bb78a41afb500b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976", @ANYRES16=r8, @ANYRES64=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4025}, 0x10) [ 390.228635][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0xff}, @mss={0x2, 0x4}, @mss={0x2, 0x5}, @timestamp, @timestamp, @mss={0x2, 0x5}], 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44014}, 0x40041) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x12040, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r11, 0xc0106403, &(0x7f00000000c0)={0x4, 0x7, 0x1, 0x8}) [ 390.531491][ C1] sd 0:0:1:0: [sg0] tag#1701 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 390.542148][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB: Test Unit Ready [ 390.548870][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.558667][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.568452][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.578286][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.588077][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.597858][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.607621][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.617406][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:14:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 01:14:16 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x202000) getpid() ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000040)={{{0x33}}, 0x1000, 0x7, &(0x7f0000000300)="71f21ae571e25a2ee8dac951f55e1a2aa1564c9ac6b518367bf8d6594b6239f05bbda9345c56a5a3dc8c2f7c859517dc15506558b2ff822a8898be1b1f00df76bfd665db774d959514e4bbc1b59a04d0e0966107bcba1e0404644bce061b37812ba6332e5d652d399d1b6552ed8e359529a47938cbc1118dd3a2fa620fda7039d8f0abed72fa9d7d4c8a9134d69edafc574508eb4f5e335fd91e2ebd024449559fece5ce69acd908706bee15d1e3a8d7c6659ecf453498d56590af4e6d143a89651ba061667099c1d763fd6852548bbe7eed8552d6cd96d1ca143776a9ee11018054a999f3d7e10d68b9080dc4bd52766321d350b57d210ab792f2a2ef1ea0ce21f45bfe916ddf19555d395d2a36c03a33f7731ca6662c195041aafcec21197c7b20a9868da0d4bd70c7691897c252b390f8e163d403ddcd22b94f76812d1ab1e24df019c596068a38e25ea5536033000df47d14b9b0ea9ad1bacd656321edc33a674a100731c52326df11712a4312f5e5ba42ec6fcf049c16a31db79be4abb68f8a349d09f649eecbe83dcea5b74bf3e1056c307a14c2ece154d3600942b9e170e452bf966ca9ae50c5d5114c91aa67733b78426b71ddae189eaf84900af905f7d387d69d205374e38fc675df01ac6b1fff3f63d31389de1e56421a3419d1b549314a208c2c3e54b46d62797687e37681c594a0c2292ca21706a594bf3268a4134faacd609d62d770fa26e30321168414d1bec324cc76043308b5471bc4f9588d396d0246e44a9db38fbe32e398e03bdb3d4f68947b36f0e3ab962ebf96b06da51a04b5ad922ddaea5346963beb4acf1515af928001eef6cdde8a488ec101a5f328d9eff614dfd2749a0cc3c47e4b8f19860110c62068401bfc385cd463346eb28fee9f431573e0284620a24cb2c1c107f5e3e69c8c21d1868a045ccf852d0aca46e0e47e10a9d7d09d1589fa0e129a77d1ec0f7ab471ad139c93dc2d8412d50da66ad5a798aa7ac97df09c13c6a022a9710c5398afad2717ddf1d54f503b845bcbecb25e7090d668b08a18b80e1629fa511d997fbf8c1872e22b65bebfdc82636693fe4c9c319d0e061b777867092f09b11ff001f972c868204894f83eaa7b9fb5322534bd8e4e673070079ba7827846138b44d0dcb514b2ea066820f599618f85d7423f75899faaecb85bec110c138e786bba33cf9de46cdcf636b4dbb96bc3711440ff601a4354073cb47f4efc349c66448056222d30141f97f9e5defac6afc30d8fb19addd8088515d01e2717c46694f2c3a221e2959a78bca1d06764a30ff80fa97da31659b4e52f57bd02863bfe485a9a9568aa7a919e0379aae8d24c01c1e2f4413fd8978c240dbd204079f78f4f93daa5ac34c11ee7358c80bf7d30adde0f1649e19d791055ab978c9a431c89c8fb67c6205c712a3c10945a72ef860e4d11b305286edddd48f478f668274fbedba9ff70294b493cbd8bac82716d01039188bc10556d55582e952895a4aaca7bdf190538be9baca4aa4ba5216d5ccba9903417710f316a8214647cef046b1b272425996c6c17a1a54f80778e54b61f633946cb5796a70dde93c0fa57cb5fce3c8134380d76654e4c094e587978a78a6d0a698a65a1c0e1c0d2517b91c51ad604ff2ca20be88bc1839fb4d466cf94bcdf6a499f56cffbcde8e00ef88d1a3679b9be8a90aa6b9ae4383e2dbd19bea77963d83850ae743b1f159e62c7f8f577ecd303d2a814a980f393c581e22154ae2b877eeed6ef188d5d073f8a813e4280842591c5aca36bb3240314b27a1dbaa40e626aac79786ff72d0e40c50aa36d0c6758fa5d8b6877d58279712521fc083d34f628b151971ba415c72c599e722394167310e4206bbd7c84334904e478d029069568927776c894045c2fc204b33796571dc629b3d7fe27a34dad79223ccb87cf82bb2271369d0925a7c1c7f8df9884bfd1832947c4ca5f0f2d2727b8380246ff836fa769f59bc4cd7ebd11e9fffcf0ed9df94e3a671bb672cbc63a72702b27a95bdb426b17948735ad3cfba0e672e222344a247d6ff3b368aadf17c3d44686faebcdff8af0c5afefeb74f3ac0c15f244e0a7598e73dba54f3fac9747a6f2bb27afe1928443f2828978a995a009381914bf794191f7d2ad27d5c4e05ae8a3e68f7d353a424fbac46709336b6f7da3f5a356bd0441e223ea89cc11b96ff376ba0e293aee9fcb400e62a6872e45627500cd84890256fdccdcc3fcfcb9da5def5342f582262e0109378dd9dfe1907fbcecb3ce91d05998d33abf406dc31d76a3bda4a42f7a2fdb46db05ec4125708b631b45aa2bba929b81e745e2336d4a6a4c9a87515a3f399d3220b73dc34fbd5de3ccc2de9d74df2891486877ca6232575cc89a7dd111c049988538872f422976dc464ece8075afd82f362d852db389f59c92465b7a157c13160192fc6ad96e8e3415c27c20050c015513fbf839cc6c25b49f604f4932be2f33bc65229128280dc0c9c027dc839d6dceb306282c7efc6f9df4f87f09199760f39f9608e3bd6d751f1d9f4e08c5e4aeea9efda637f1842d251c587c8e0eb2b61e4300272ed9b1646a628e11fce303494b34a227286a509a10a1874c7360f26f8a29e302867ef81cde7479d3ba2ec999b52e3ba18b5afe4b24ca4f1d7b0b48c9900048ff0578678b820b169f02bae2a6b1c8557611632278c997126e5b7c52ad4096ae723bd1df6dfe630d97367babf71ab6530141a8c78d86e9622a7114eba8bc95a5973ace1669edb3e560a784e9be713cd2e601527ef5fdabc80af1f2ab4ce154deee4c269322795c64c985c2da4672252eba23231270d53399312389fba8c52292b90923cc6915a13d5a9e839adae6a6882b5c039853356a249b69479b32f503604223cd646f52bf2942a486888b145c4a751fa791b4fb19086c4d92b6a95ed9897199e4fe9a206afc00d61d818d5b6e82adbe767fa42091126fa48126f5cbd4ad4bbdc97388b32561018e0458c41cb2fea8e3e0679b036df1af0dfd7e835e1c386e0cfad8a140c7210d21bced6cb41acd5ab9746bdd459135508ea18523b4146fdda557c59779961c9c70b2791e8a0392ab2b162fcfc1415890be657db52fa79033e2d227847a3ab7f3facaadbee27cd6125b5744ba27925815dbd7602f997628140b71dde2114355f3c4848d2c342737115b9790dfbc00aebf09bf600c672963f209e081f53d971236a602b18cf02e9a5c1b3c7a2831af1f0e6b5ecd325f1e2eb86e867a749a8438a5111820ca6822888ef6adc20102991ba458219a9e8ca658b54f8e36c5cabe9528725a930cbd5ad2c33e0609b23a80b94633944db54ac09013d5e7843f6ee0b8eef341eef4a9d1fddacab938107daba46b1a25644b63b3bbe265505686b8a2bbf974f2ac68225cc26f609128fdbe9844b01bd4730cafb441fb336bd9d540d3a2313491ead157573c9847f6f1d53901e38ffc622104476e06182a23320d433b1413bf87fe32e46a481b8de11e4b4eca5732fe43933dbf2b7cdb8ac3e3c7c53e315bcfbd7d11f8efed39772deaa77923b1b1701632cec3e29973e33b058f43ca98e43ab5b77ac3ba2aa59ad16e08dea0c2834b92aa6e2296c6d42a32a668dc1710c693541c3e6f32042f0aec7c7820638e2a97bc65011f4710d5b489cf3c5e6663a16633680cc3bb617cd862ff0bf863f0b9b16e03592f4f13dbe70a6f1e5377da58cacd6f335bd2eced176e3bb9a9927c22368f74e3f7091420a72f298bd0a7ee49f1a2b079a7ae29da89f60552a0c10f098c2b9b0a42accd5c535e2b4868ba991acd9c62cf7a31620072b210fa67524347b25a87b6a504a2f961ba7fa4fa9a02719454263eb74616e9f991bf357b34ea22103d0b5d4f1cd8551665835e1370d779efecaf47588c853550f5a12858fa8ebffc55e0322567cc93903dc5643e96bf2164ea35bcd1558ec489120ac6d19b5a5649b76be62154ee0d78c156e9429694bc4ef9518deaf8a8222c6feccefa352ceb9ef384b6b4974610a1e8ce8dbb765753ae25e9992857586c6c45698b3d0c266c60c640cf3627ad6b5c5a573ca30b9a96bb63faf487c9ab2e186233a0ce738646b69700ce52898a5a7391e2d53de2388d3b5659dd0680980acd6a302b24ec4b476a8b403d2000637968bfbccf1036e982641f375864146f0c625c1065c92200cdaf1a51ac8f0a4538e7f6f27eda20403789a14f3188a2de6db399cbfc509f051c97f9a08af272287c39501878d8362e5f14bda62eb9128c38e63e6341f75720f34d63f85efc9988b9a12acbe1fcfb2cc251e7263889610014898213fe662125bc8486ee7d2ad76eb9e8bc204e02e6ae19de48ea4f506a6f7bee960da4b49ac99300e13711b867d433e50f37b10c2b90fca91b057ca5a2d1be3e8c8f48b16c27c76ae0f3ac7cc2ca3ca771d5ac56d5f160221741038a60cc473ccb6236dc668fe52966d21d8a4e9dd660beca0fb7de3a1a9ad2d56f0156b99547f0090338cc0ccf4aa158792417554c949ca68e92878db27ad39804f8817c3cdb67cbb53201ef9bf0677967a878f05716d27b64dca37acb9a1e4ead7f7cf75ca623b09b11574377c6fd85473b9cc3869cdc259ca43fe9f7bf487248391b4db2733fa2b939e840ba8bb0c7e8da876ee0971187cbfc9071ed8faf3273905f9afb6cb12432344042de1dd99dcc3c2c5b61ce08270e996892ba10abc4a6c341c1674aa8f29b82ed08bf57e9a6396b29bf86e171f421148b13b97faf298f9e3d9c2528873890ac9beb8c518a4e2be4723561fc04f0cdde718e8cb19f9dc5020b87534eb238a648b02b3a188dfe6357786d440992b5a5cd7022dddf7af3bd163270c9464d8cc445e4cad80d1f888a0748675b7e167ec479901fbbf5343b80d07d83c192fe28e39bb8f4ee79baa2ce2ba5ecd99633a46fc0cd98abffeb5b013053a708b94a7249d763ea30629beda0370ad66bee89f8ee7e49e57ecd20da8bc7d3a790f0cc084988f0865483ff8592489c94b6712f0eb3ef226aa4dac3082cfd4994d13da77650eefc5d2008e15cc27dd69781f25e30ff527478cb806c0a256f1b990ffb9a0577ae9f8529b3b036b618ecbdfab76320cad2b04d1c7cfd17604cf862a5c544b2eb78357e611c780d262827f73d4ff468348bd85d3d7378c2d88de486bee40f0357ef042d1212a01dc89d70c46f106f003b8cf7ca098303dc4fcdc7f35cda1737693f970322bf168bac24ea6556d87dff99f0d5e073f3139b2e2cd807a6e70e5f3031a157899ce9e0b7429ab92b3367aa7eb88c191606bbbe2c2ff7ed29a5f96a81d54fb3c111d108e54fce2a08c783592a28117d8503370beef7f19f1e5cf88c31ba8a192f202599ffa21c203c2d975b9ad116a300271b047d13c4d86f1e3de441b4debd5b0c532ab0a5eda0aaa3b80b53f468c8f83e568fdb3e75323da5a2fa415695eb3ec905b345c232a236ec2036a9b79796447125f96fd2659e303a5a1c59b3126bd8cc44e6f2e8bad8f9b64c10ae7cea220e104feb9e85c22263ef74269c75ceb77b161145ff04e84555c60b1d9cbf81bf3ebed646e0095ed80f18020a832894b621f3293c48788c4ed4cdce384cf5535083d2e9a529eac00f8edd100dab34dc6231fe423e7fa0623a03aad8db3ea1bf2d082939aee3c3c9ee08dd6b0df22fe4c732a4041e16a49d3cf7bc5a9e37f2f82c923b058e1e18bf98705554489e0ef2e98ba48cc212375f4c1e34dabd05c1da450f645ba6697c26deb23a567af753c504"}) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) [ 390.627198][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.636999][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.646789][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.656593][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 390.666374][ C1] sd 0:0:1:0: [sg0] tag#1701 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x40) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x265c, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], r4, r7, 0x0, 0x0, 0x3}, 0x40) r9 = dup2(r0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r10, r11) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={0x7}) [ 391.037166][T11951] dccp_invalid_packet: P.Data Offset(0) too small 01:14:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, r4) 01:14:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 01:14:16 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xa, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x9, 0x4}, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x9, 0x54e, 0xffffffff}, &(0x7f00000000c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x7}}, 0x10) clock_getres(0x5, &(0x7f00000002c0)) [ 391.302535][ T32] audit: type=1800 audit(1595034856.761:13): pid=11937 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="memory.current" dev="sda1" ino=15759 res=0 01:14:17 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8005) write$binfmt_misc(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c60100000045c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f024e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e600000000000000000038ed92e12cb4f6e0b8dd1f69000000000000f390d71cc6092cddd3b0490b0a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e6905117c97a12f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94"], 0x197) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x0, &(0x7f0000000600)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_LK(0xffffffffffffffff, &(0x7f00000007c0)={0x28, 0x0, 0x3, {{0x40000000000004, 0x3f, 0x1}}}, 0x28) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="2b00f7ff6424720d36bf0bbd003d96876ca818ed0f58e0a03a2b4b5fe85a2d080044f86921794b1ef3f6025c3a823d5aa40f021d53e8538e33b7bb368cc61bb83a44fc58d93a9c378458a99fd5c37efd862f1e47ca642fbdfd5fa0655610d19e2e93ab839f3f1bdc970cf202e34ab66ad1b24097cc3f7ed064e93732e613980264807d3a30a2bcf8f85d62598fe71fc25c493ed73ec93fd2274b5d3039bde451a99503c3b872544b285696594e964d8da80356c6360d070dd392048eb8a45ff4ecef74d0000000000000", @ANYRES16=0x0, @ANYBLOB="0700000000000000df251800000008000300", @ANYRES32=r4, @ANYBLOB="080900000000ccba00001a00ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4048040) write$binfmt_script(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="5704b54d0e8f593fa0ad39432a7f43ef3a0183b74f3879e7f71e395309bc83a73df202dbf411e939e08c0b6b203013120df10f158325c1cb4e18bf0168185ef89126ce1a479d05d424edf62a8b0bd9ccae774b4e8805b02ac36cee3f82b14d58562ace6ab1f55effff808caf749534d8b728084fa384c0090c51c156bec5b97c5608172a88a591440156fa489fe632871f7ac657c9cf6dbbd4c9293b660d901e0be06ff21b615307780447da997c18adba2fa67fcd52e49dcbcd590661abd0488a0355bb1be6950ff5fe2bfe1eab09885a1d3bdd743410cc510ec7f136b11385db759f", @ANYBLOB="5801844715590a23813caea67a0fa37fafd5", @ANYBLOB="1a80a0dd9229e1745a99c547db2b9e575522c7de472c5e8ce885a52ed01d29f3cda618e40dfea89819197fb2d02a9f5a49b8481c6ef7eea3261669740a70e4633593a562f85c48b14af692967035351bcc23ce4678c31bbb47492f2c67745cfa7927f7b50b2eb13d9da9a98a67de84fe3ec51aa08294c41fb530567409047c8ef3022b735c44720bdc4c8cc94a30342b5c52eed9bf03293f65065e0cebc7e3b8e43a197f66e05061fea91bf500fc0ac6d8e4ed312cb9587f2a88f4905cb8e23f63a445fed0", @ANYBLOB], 0xfffffdef) 01:14:17 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xd, 0x1, 0xffffffffffffffff, 0xfffffffc, [], 0x0, r0, 0x1, 0x0, 0x4}, 0x55) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xd) [ 391.728252][ C1] sd 0:0:1:0: [sg0] tag#1702 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 391.739064][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB: Test Unit Ready [ 391.745786][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.755601][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.765414][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.775291][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.785151][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.795004][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.804845][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.814709][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.824546][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.834376][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.844208][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.854056][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.863887][ C1] sd 0:0:1:0: [sg0] tag#1702 CDB[c0]: 00 00 00 00 00 00 00 00 01:14:17 executing program 3: clock_getres(0x7, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x20000) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1f, 0x402000) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x22, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000001f00), r4}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x3}}, 0x18) 01:14:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101, 0x0) dup2(r3, r4) 01:14:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:14:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 01:14:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101, 0x0) dup2(r3, r4) 01:14:18 executing program 3: clock_getres(0x7, &(0x7f0000000000)) 01:14:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@updpolicy={0xb8, 0x19, 0x401, 0x0, 0x0, {{@in=@broadcast, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0) 01:14:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101, 0x0) dup2(r3, r4) [ 393.008148][T12000] dccp_invalid_packet: P.Data Offset(0) too small 01:14:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) clock_getres(0x5, &(0x7f00000002c0)) 01:14:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$cont(0x9, r5, 0x0, 0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000040)={&(0x7f00000000c0)=""/207, 0xcf}) 01:14:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x7f0f3f216f9ed7c1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}]}, 0x58}}, 0x0) 01:14:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r3, r4) 01:14:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 01:14:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x0, 0x6, 0x0, @mcast1, @rand_addr=' \x01\x00', 0x8, 0x40, 0x17cf, 0x2}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0xc10b3b8393b1a8d4}, {0x5, 0x2}, {0x6, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x20000084) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r8) 01:14:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x7f0f3f216f9ed7c1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}]}, 0x58}}, 0x0) 01:14:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x1ff}) clock_getres(0x5, &(0x7f00000002c0)) [ 394.167823][T12040] dccp_invalid_packet: P.Data Offset(0) too small 01:14:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r3, r4) 01:14:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x7f0f3f216f9ed7c1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}]}, 0x58}}, 0x0) 01:14:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4000004, 0x10004, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x10}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800000000400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r5, 0x80, 0x3, [0x5, 0x8, 0x5]}, 0xe) pipe(&(0x7f0000000000)) clock_getres(0x1, &(0x7f0000000040)) 01:14:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r3, r4) 01:14:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x7f0f3f216f9ed7c1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}]}, 0x58}}, 0x0) 01:14:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x3f00, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) 01:14:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) fallocate(r2, 0x68, 0x7, 0x5) r3 = dup2(r0, r1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x34) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000180)={0x6, 0x0, {0x0, 0x2, 0x1, 0x0, 0x7}, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x400, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, r6}, 0x40) r8 = dup2(r5, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) [ 395.790529][T12081] dccp_invalid_packet: P.Data Offset(0) too small 01:14:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(0xffffffffffffffff, r3) 01:14:21 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1c2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2401, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getrandom(&(0x7f0000000080)=""/47, 0x2f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x2, @multicast2}}}, &(0x7f0000000400)=0x90) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1800000023002908fed7ffff000100000400000004008b00"], 0x18}, 0x1, 0x60, 0x0, 0x20000000}, 0x0) 01:14:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x2, 0x4, 0x34, 0x0, r1, 0x4, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept$packet(r8, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a00)=0x14) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000001c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x198, 0x13, 0x800, 0x70bd28, 0x25dfdbfd, {0x11, 0x6a, 0x31, 0xca, {0xffff, 0x4e20, [0x4, 0x80000001, 0x1, 0xffff7fff], [0x80000001, 0x200, 0x9ad0, 0x2], r9, [0x3f, 0x101]}, 0x3f, 0xfffffff8}, [@INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "d775eb8f96d14b6cd5197f15fd74c5f685376fd81242abbb66b8207f8da4357eddb166321a57bac8b380afb20d57f8f14ccdfdad131f96a7e5ec864846d09acce1f7b9b694e4f3883b5580e13b9ac55c7dbc011836e1ebe625b2a5c06cddcd9c3cee035e16471bfaa38bc1d5ee5bedba3b6c961708c81676b44f39d7f8484932e6f7c13fb9d6"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "6878ccd8d97738a14194e567769ec28af15c385e098f4fd00d079dc6deeee46fd38587bbce7d0637024b969b2a335c96ed0ca1293f2877ffad303c7a0fa65feaa951773b868d42b89456760fe69b146b7bc6737eb9de7466e8f3f6c87316f21a714519513e0f74d2f9506c14767f61597e7cfdb203ae945038c376338f0e48e243c79671bdc8843d2c07041e83416c85ccb65a7373ed219a8906d51d957f18b04b478c1b5eb61d2f09dae79c909fa66c4b39d356b86e3d23c79c14c8"}]}, 0x198}, 0x1, 0x0, 0x0, 0x8020}, 0x9800) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) dup2(r10, r11) 01:14:21 executing program 5: clone(0x200000000204ab80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x2001, 0x3, 0x2c0, 0x0, 0x150, 0x150, 0x150, 0x150, 0x228, 0x1e8, 0x1e8, 0x228, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'tftp-20000\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x8000000}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@local, @dev, 0x0, 0x0, 'batadv_slave_1\x00', 'caif0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x320) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 396.267279][T12101] xt_time: invalid argument - start or stop time greater than 23:59:59 01:14:21 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x38}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:14:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(0xffffffffffffffff, r3) 01:14:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) [ 396.631171][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$l2tp(r5, &(0x7f0000000100)="0fdfe0bfec19b64fb422591ee7", 0xd, 0x40000, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, 0x3}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x20000800, 0x400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r10 = dup2(r8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000180)={0xb0d, 0x1, 0x3, "55b3d9e070a627c4097f983bdc28bc373c0a252ee1871772c777524f6fe846fc", 0x41495043}) dup2(r6, r7) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x2}}, 0x18) [ 396.739870][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60000, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getpeername$l2tp6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000a80)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r4}, &(0x7f0000000600)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x4d6e, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="092d09b92bab3b2fda96264634fdb1d5de0336880a90a413705801e9da89c130b6019222da063419b2ba9c9bdf33c9994f9acb7df57d2d", 0x37}, {&(0x7f00000001c0)="524df6269ab09cb1e071cfbfaadcf6e7b1b2b1da503725f12aaed2e255d20acbfb36101acc09dd7e04666cdd321cb309a87caa1fc501aa08b0ccf600205d87af4afda37f0710c7824e1247287ec3f1b1e733f74462795a4f05ddcf805e92f3e84c1c9f1685f7379db78e26a8887fa8f56402df07434a5973b479e56d6045f985252df0fc74c72a963f1ca3f76059de5bdc1b8c8280da51ebd00ff1350916c6ef305f5417c83da1a66563d38345974ad28d9c9e889e90d2901a7814c44585ea", 0xbf}], 0x2, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x63a}}], 0x18, 0x841}, {&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}, 0x400}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="6e8bac6b374392f1ff0640dfa7306a842167c6378bfddfde3d1f2827098e9d984587c1b34e9b6068edee7a368ac840834e7ab6b48038cb1c829267709eded7fb3c4e10422b79c67d72b82ea5420485b6f0858e4ec683785b4d4de1e4abd46fddc9909a2a869e635172e23441f42c1b043be572b4793d6b9f03ec30bc4bfc", 0x7e}, {&(0x7f0000000340)="8dbcbbbeaafe8f01dac4e9a0cd52fdb65ad2744e54c785953fea6fafe59a88c6974c2320a148bfc025c9d5ba3cdee387722c935ea9fc5c17e1e387d530de0b4a422a1938288a40b654bf4dde45a03bbbd0a6044b077945ebd4795dac8de85b7821beaef40ba10454b3a725509f3787e81d2e4acc", 0x74}, {&(0x7f00000003c0)="349abbd1e00ee9f628c7420aebba906c80b879d45a335dbb9d25e59b4a32d8e810d98c008537b95912aa17640b3ec36a092be5028211c5a6c64f40ed5e89cb3bff1334af343b9e1f878403c045244c3c75847c41fa600f8dfdce70eb496092", 0x5f}], 0x3, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0xb16c, 0x2, 0x4, 0xff, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @rand_addr=0x64010102}}, @init={0x18, 0x84, 0x0, {0x9, 0xfff8, 0x3, 0x8a0}}], 0x78}, {&(0x7f00000006c0)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6b1a}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="a6ff8e7ca2a43f752a73b7d91645faa791046970f8fc5a400048addefac386fa5d405aeb5914195f5a81e0ace95cac69fb6d66a69308104765af2aa13cc54a", 0x3f}, {&(0x7f0000000740)="e235d171516ea427cf5e7bf021bab64c0535a542e7a12f33f0cf399cccdb70e844069b8cb9065c42cdcb3247e80f02b4fc05b81cf361c3c7ce02dfe1aa42532d74589aea8feca07011996401356102b368bdbc0f0f4782b4941569cefd307b2545754ab6b318b7aa851e8705aec638daa18fb04c41ed027a8c6914c3a9", 0x7d}, {&(0x7f00000007c0)="4c55ca5579dfd7ab2bb40506835adc3289c081d787c65022b895270f88302a3d66de899eb1d54286ec247645dea73f85462d12e8bbedbe275fbd1b2467dee1e1ba8542c708b967200af98c8be96810ee4a5f1a0acd89a4e327dc34dd4ae1b409aaab99", 0x63}, {&(0x7f0000000840)="c37d7a88f3d254c8cf10db21e686aa14117b985308a2fd167aff46ca4702bea1515a0ddcb8ec1b95d683932669bd76cc3d2097952a4cc9dadab92362", 0x3c}, {&(0x7f0000000880)="26aaae33f45c676716f8a03a3c8de8eb28215e2afeb455961b09e588821f7acec5bdaa1e09c21e2a5102", 0x2a}], 0x5, 0x0, 0x0, 0x4000016}], 0x3, 0x80) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000a00)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="f800000000000000440012800b00010069703667726500003400028014000600fe8e64000000000000000000000000bb14000700c93b70e600000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x64}}, 0x0) [ 396.960174][T12127] dccp_invalid_packet: P.Data Offset(0) too small 01:14:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(0xffffffffffffffff, r3) 01:14:22 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x38}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:14:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 397.596466][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, 0xffffffffffffffff) 01:14:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x6, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000040)=""/20) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x1000, 0x8, 0x4, 0x81, 0x1}) 01:14:23 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x38}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 398.101114][T12158] dccp_invalid_packet: P.Data Offset(0) too small 01:14:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60000, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getpeername$l2tp6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000a80)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r4}, &(0x7f0000000600)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x4d6e, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="092d09b92bab3b2fda96264634fdb1d5de0336880a90a413705801e9da89c130b6019222da063419b2ba9c9bdf33c9994f9acb7df57d2d", 0x37}, {&(0x7f00000001c0)="524df6269ab09cb1e071cfbfaadcf6e7b1b2b1da503725f12aaed2e255d20acbfb36101acc09dd7e04666cdd321cb309a87caa1fc501aa08b0ccf600205d87af4afda37f0710c7824e1247287ec3f1b1e733f74462795a4f05ddcf805e92f3e84c1c9f1685f7379db78e26a8887fa8f56402df07434a5973b479e56d6045f985252df0fc74c72a963f1ca3f76059de5bdc1b8c8280da51ebd00ff1350916c6ef305f5417c83da1a66563d38345974ad28d9c9e889e90d2901a7814c44585ea", 0xbf}], 0x2, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x63a}}], 0x18, 0x841}, {&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}, 0x400}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="6e8bac6b374392f1ff0640dfa7306a842167c6378bfddfde3d1f2827098e9d984587c1b34e9b6068edee7a368ac840834e7ab6b48038cb1c829267709eded7fb3c4e10422b79c67d72b82ea5420485b6f0858e4ec683785b4d4de1e4abd46fddc9909a2a869e635172e23441f42c1b043be572b4793d6b9f03ec30bc4bfc", 0x7e}, {&(0x7f0000000340)="8dbcbbbeaafe8f01dac4e9a0cd52fdb65ad2744e54c785953fea6fafe59a88c6974c2320a148bfc025c9d5ba3cdee387722c935ea9fc5c17e1e387d530de0b4a422a1938288a40b654bf4dde45a03bbbd0a6044b077945ebd4795dac8de85b7821beaef40ba10454b3a725509f3787e81d2e4acc", 0x74}, {&(0x7f00000003c0)="349abbd1e00ee9f628c7420aebba906c80b879d45a335dbb9d25e59b4a32d8e810d98c008537b95912aa17640b3ec36a092be5028211c5a6c64f40ed5e89cb3bff1334af343b9e1f878403c045244c3c75847c41fa600f8dfdce70eb496092", 0x5f}], 0x3, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0xb16c, 0x2, 0x4, 0xff, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @rand_addr=0x64010102}}, @init={0x18, 0x84, 0x0, {0x9, 0xfff8, 0x3, 0x8a0}}], 0x78}, {&(0x7f00000006c0)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6b1a}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="a6ff8e7ca2a43f752a73b7d91645faa791046970f8fc5a400048addefac386fa5d405aeb5914195f5a81e0ace95cac69fb6d66a69308104765af2aa13cc54a", 0x3f}, {&(0x7f0000000740)="e235d171516ea427cf5e7bf021bab64c0535a542e7a12f33f0cf399cccdb70e844069b8cb9065c42cdcb3247e80f02b4fc05b81cf361c3c7ce02dfe1aa42532d74589aea8feca07011996401356102b368bdbc0f0f4782b4941569cefd307b2545754ab6b318b7aa851e8705aec638daa18fb04c41ed027a8c6914c3a9", 0x7d}, {&(0x7f00000007c0)="4c55ca5579dfd7ab2bb40506835adc3289c081d787c65022b895270f88302a3d66de899eb1d54286ec247645dea73f85462d12e8bbedbe275fbd1b2467dee1e1ba8542c708b967200af98c8be96810ee4a5f1a0acd89a4e327dc34dd4ae1b409aaab99", 0x63}, {&(0x7f0000000840)="c37d7a88f3d254c8cf10db21e686aa14117b985308a2fd167aff46ca4702bea1515a0ddcb8ec1b95d683932669bd76cc3d2097952a4cc9dadab92362", 0x3c}, {&(0x7f0000000880)="26aaae33f45c676716f8a03a3c8de8eb28215e2afeb455961b09e588821f7acec5bdaa1e09c21e2a5102", 0x2a}], 0x5, 0x0, 0x0, 0x4000016}], 0x3, 0x80) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000a00)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="f800000000000000440012800b00010069703667726500003400028014000600fe8e64000000000000000000000000bb14000700c93b70e600000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x64}}, 0x0) 01:14:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, 0xffffffffffffffff) 01:14:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000040)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x4, 0x204, 0x4, 0x1000d}, 0x40) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r8, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {r9, r10+60000000}}, &(0x7f0000000100)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r11, r12) [ 398.637111][T12168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101, 0x0) dup2(r3, 0xffffffffffffffff) 01:14:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:24 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x38}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:14:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28002, 0x16c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000140)={'ip6_vti0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}) write$apparmor_exec(r3, &(0x7f00000000c0)={'stack ', '/dev/sequencer2\x00'}, 0x16) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x4, r6, 0x4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000180)={0x3, 'vcan0\x00', {}, 0x8553}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) write$P9_RXATTRCREATE(r8, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) dup2(r5, r8) [ 399.120249][T12190] dccp_invalid_packet: P.Data Offset(0) too small [ 399.150576][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60000, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getpeername$l2tp6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000a80)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r4}, &(0x7f0000000600)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x4d6e, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="092d09b92bab3b2fda96264634fdb1d5de0336880a90a413705801e9da89c130b6019222da063419b2ba9c9bdf33c9994f9acb7df57d2d", 0x37}, {&(0x7f00000001c0)="524df6269ab09cb1e071cfbfaadcf6e7b1b2b1da503725f12aaed2e255d20acbfb36101acc09dd7e04666cdd321cb309a87caa1fc501aa08b0ccf600205d87af4afda37f0710c7824e1247287ec3f1b1e733f74462795a4f05ddcf805e92f3e84c1c9f1685f7379db78e26a8887fa8f56402df07434a5973b479e56d6045f985252df0fc74c72a963f1ca3f76059de5bdc1b8c8280da51ebd00ff1350916c6ef305f5417c83da1a66563d38345974ad28d9c9e889e90d2901a7814c44585ea", 0xbf}], 0x2, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x63a}}], 0x18, 0x841}, {&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}, 0x400}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="6e8bac6b374392f1ff0640dfa7306a842167c6378bfddfde3d1f2827098e9d984587c1b34e9b6068edee7a368ac840834e7ab6b48038cb1c829267709eded7fb3c4e10422b79c67d72b82ea5420485b6f0858e4ec683785b4d4de1e4abd46fddc9909a2a869e635172e23441f42c1b043be572b4793d6b9f03ec30bc4bfc", 0x7e}, {&(0x7f0000000340)="8dbcbbbeaafe8f01dac4e9a0cd52fdb65ad2744e54c785953fea6fafe59a88c6974c2320a148bfc025c9d5ba3cdee387722c935ea9fc5c17e1e387d530de0b4a422a1938288a40b654bf4dde45a03bbbd0a6044b077945ebd4795dac8de85b7821beaef40ba10454b3a725509f3787e81d2e4acc", 0x74}, {&(0x7f00000003c0)="349abbd1e00ee9f628c7420aebba906c80b879d45a335dbb9d25e59b4a32d8e810d98c008537b95912aa17640b3ec36a092be5028211c5a6c64f40ed5e89cb3bff1334af343b9e1f878403c045244c3c75847c41fa600f8dfdce70eb496092", 0x5f}], 0x3, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0xb16c, 0x2, 0x4, 0xff, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @rand_addr=0x64010102}}, @init={0x18, 0x84, 0x0, {0x9, 0xfff8, 0x3, 0x8a0}}], 0x78}, {&(0x7f00000006c0)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6b1a}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="a6ff8e7ca2a43f752a73b7d91645faa791046970f8fc5a400048addefac386fa5d405aeb5914195f5a81e0ace95cac69fb6d66a69308104765af2aa13cc54a", 0x3f}, {&(0x7f0000000740)="e235d171516ea427cf5e7bf021bab64c0535a542e7a12f33f0cf399cccdb70e844069b8cb9065c42cdcb3247e80f02b4fc05b81cf361c3c7ce02dfe1aa42532d74589aea8feca07011996401356102b368bdbc0f0f4782b4941569cefd307b2545754ab6b318b7aa851e8705aec638daa18fb04c41ed027a8c6914c3a9", 0x7d}, {&(0x7f00000007c0)="4c55ca5579dfd7ab2bb40506835adc3289c081d787c65022b895270f88302a3d66de899eb1d54286ec247645dea73f85462d12e8bbedbe275fbd1b2467dee1e1ba8542c708b967200af98c8be96810ee4a5f1a0acd89a4e327dc34dd4ae1b409aaab99", 0x63}, {&(0x7f0000000840)="c37d7a88f3d254c8cf10db21e686aa14117b985308a2fd167aff46ca4702bea1515a0ddcb8ec1b95d683932669bd76cc3d2097952a4cc9dadab92362", 0x3c}, {&(0x7f0000000880)="26aaae33f45c676716f8a03a3c8de8eb28215e2afeb455961b09e588821f7acec5bdaa1e09c21e2a5102", 0x2a}], 0x5, 0x0, 0x0, 0x4000016}], 0x3, 0x80) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000a00)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="f800000000000000440012800b00010069703667726500003400028014000600fe8e64000000000000000000000000bb14000700c93b70e600000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x64}}, 0x0) 01:14:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2b8) 01:14:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x162d21aad8eff029}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24014040}, 0x50005) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 399.932288][T12226] dccp_invalid_packet: P.Data Offset(0) too small 01:14:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2b8) 01:14:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60000, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getpeername$l2tp6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000a80)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r4}, &(0x7f0000000600)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x4d6e, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="092d09b92bab3b2fda96264634fdb1d5de0336880a90a413705801e9da89c130b6019222da063419b2ba9c9bdf33c9994f9acb7df57d2d", 0x37}, {&(0x7f00000001c0)="524df6269ab09cb1e071cfbfaadcf6e7b1b2b1da503725f12aaed2e255d20acbfb36101acc09dd7e04666cdd321cb309a87caa1fc501aa08b0ccf600205d87af4afda37f0710c7824e1247287ec3f1b1e733f74462795a4f05ddcf805e92f3e84c1c9f1685f7379db78e26a8887fa8f56402df07434a5973b479e56d6045f985252df0fc74c72a963f1ca3f76059de5bdc1b8c8280da51ebd00ff1350916c6ef305f5417c83da1a66563d38345974ad28d9c9e889e90d2901a7814c44585ea", 0xbf}], 0x2, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x63a}}], 0x18, 0x841}, {&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}, 0x400}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="6e8bac6b374392f1ff0640dfa7306a842167c6378bfddfde3d1f2827098e9d984587c1b34e9b6068edee7a368ac840834e7ab6b48038cb1c829267709eded7fb3c4e10422b79c67d72b82ea5420485b6f0858e4ec683785b4d4de1e4abd46fddc9909a2a869e635172e23441f42c1b043be572b4793d6b9f03ec30bc4bfc", 0x7e}, {&(0x7f0000000340)="8dbcbbbeaafe8f01dac4e9a0cd52fdb65ad2744e54c785953fea6fafe59a88c6974c2320a148bfc025c9d5ba3cdee387722c935ea9fc5c17e1e387d530de0b4a422a1938288a40b654bf4dde45a03bbbd0a6044b077945ebd4795dac8de85b7821beaef40ba10454b3a725509f3787e81d2e4acc", 0x74}, {&(0x7f00000003c0)="349abbd1e00ee9f628c7420aebba906c80b879d45a335dbb9d25e59b4a32d8e810d98c008537b95912aa17640b3ec36a092be5028211c5a6c64f40ed5e89cb3bff1334af343b9e1f878403c045244c3c75847c41fa600f8dfdce70eb496092", 0x5f}], 0x3, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0xb16c, 0x2, 0x4, 0xff, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @rand_addr=0x64010102}}, @init={0x18, 0x84, 0x0, {0x9, 0xfff8, 0x3, 0x8a0}}], 0x78}, {&(0x7f00000006c0)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6b1a}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="a6ff8e7ca2a43f752a73b7d91645faa791046970f8fc5a400048addefac386fa5d405aeb5914195f5a81e0ace95cac69fb6d66a69308104765af2aa13cc54a", 0x3f}, {&(0x7f0000000740)="e235d171516ea427cf5e7bf021bab64c0535a542e7a12f33f0cf399cccdb70e844069b8cb9065c42cdcb3247e80f02b4fc05b81cf361c3c7ce02dfe1aa42532d74589aea8feca07011996401356102b368bdbc0f0f4782b4941569cefd307b2545754ab6b318b7aa851e8705aec638daa18fb04c41ed027a8c6914c3a9", 0x7d}, {&(0x7f00000007c0)="4c55ca5579dfd7ab2bb40506835adc3289c081d787c65022b895270f88302a3d66de899eb1d54286ec247645dea73f85462d12e8bbedbe275fbd1b2467dee1e1ba8542c708b967200af98c8be96810ee4a5f1a0acd89a4e327dc34dd4ae1b409aaab99", 0x63}, {&(0x7f0000000840)="c37d7a88f3d254c8cf10db21e686aa14117b985308a2fd167aff46ca4702bea1515a0ddcb8ec1b95d683932669bd76cc3d2097952a4cc9dadab92362", 0x3c}, {&(0x7f0000000880)="26aaae33f45c676716f8a03a3c8de8eb28215e2afeb455961b09e588821f7acec5bdaa1e09c21e2a5102", 0x2a}], 0x5, 0x0, 0x0, 0x4000016}], 0x3, 0x80) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000a00)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="f800000000000000440012800b00010069703667726500003400028014000600fe8e64000000000000000000000000bb14000700c93b70e600000000000000000000000108000100", @ANYRES32, @ANYBLOB], 0x64}}, 0x0) 01:14:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2b8) 01:14:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000100)={0xbb8, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x4}, 0x81, 0x2, 0x0, 0x81, 0x24, 'syz1\x00', "f4f7d3b0ab9f4ff5f284b49373d7df5ca82be936b81745ff1eb430aaa1b71cc1", "90a4aa8532165549003f8744bcf5fc14c971e1f86bcd6d25e536a2921a6f0835", [{0x747a, 0x341a, {0x2}}, {0x8000, 0x2, {0x2, 0x2}}, {0x6, 0x2, {0x3, 0x9}}, {0x3, 0x5, {0x0, 0x4}}, {0xee, 0x1, {0x2, 0x4}}, {0x2, 0xa3, {0x3, 0x3f}}, {0x2, 0x7cc0, {0x3, 0x4}}, {0xff01, 0x5, {0x0, 0x1ff}}, {0x3, 0x8, {0x0, 0x4}}, {0x3, 0x7, {0x1, 0x4}}, {0xbd, 0x4, {0x2}}, {0x7ff, 0x671, {0x2, 0x6}}, {0x5, 0x0, {0x3, 0x400000}}, {0xff, 0x100, {0x0, 0x7f}}, {0xfe00, 0x10, {0x3, 0xfff}}, {0x4, 0x9, {0x1, 0xfffffff9}}, {0x657, 0x8, {0x3, 0x6}}, {0x1, 0x7, {0x3, 0x3}}, {0x3, 0x7ff, {0x2, 0x7fffffff}}, {0x6781, 0xcafe, {0x0, 0x5}}, {0x3f, 0xfff8, {0x0, 0x9}}, {0xe38, 0x8000, {0x3, 0x4}}, {0x5, 0x5, {0x2, 0xebb4}}, {0x9, 0x140, {0x1, 0x4}}, {0x6, 0x7ff, {0x2, 0x5}}, {0x0, 0x9, {0x3, 0x2e3}}, {0x1f, 0x67, {0x1, 0x4}}, {0x8, 0x5, {0x3, 0x2}}, {0x9, 0x3f, {0x3, 0x97}}, {0xffff, 0x4, {0x0, 0x8}}, {0x101, 0x2, {0x0, 0x401}}, {0x0, 0xe33, {0x1, 0x1}}, {0x4, 0x8, {0x3, 0x9}}, {0x73, 0xe00, {0x1, 0x9}}, {0xff, 0x7, {0x3}}, {0x6, 0x4, {0x0, 0x1}}, {0x3b22, 0xb7, {0x0, 0x3f}}, {0x7ff, 0x8, {0x3, 0x3}}, {0x0, 0x9, {0x1, 0x8a}}, {0x100, 0x1ff, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x7f, 0x5, 0x80, 0xfff, 0x21, 'syz0\x00', "d082b02fc07ade33c45ab64ef002172efda867d4c7cb68b6d947103599a536b5", "cb6b6a70de0868b36ea0d22b2182aed9b33bc24b05d73d4ce774b20b3e8d9b4f", [{0x8, 0x4, {0x2, 0x80}}, {0x8, 0x401, {0x1, 0x7}}, {0xffe1, 0x3ff, {0x1}}, {0x7fff, 0x1, {0x3, 0x8}}, {0x40, 0x2, {0x1}}, {0x20, 0x3, {0x3, 0x80000001}}, {0x9, 0x1, {0x2, 0x400}}, {0x8, 0x0, {0x2, 0x8}}, {0x81, 0x6, {0x0, 0x8000}}, {0xfff, 0x6, {0x3, 0x4e4570a7}}, {0x4, 0x800, {0x2, 0x1}}, {0x7ff, 0x3, {0x3, 0x5cb0645f}}, {0x0, 0x401, {0x0, 0x80}}, {0x0, 0x5, {0x1, 0x7ff}}, {0x0, 0xff, {0x3, 0x9}}, {0x3, 0xfff7, {0x0, 0x7}}, {0x0, 0x0, {0x0, 0x6}}, {0x92, 0x8, {0x0, 0xe7}}, {0x4, 0x1ff, {0x0, 0x4b8b}}, {0xfff7, 0x1000, {0x0, 0x80000000}}, {0x2, 0x6, {0x0, 0x8}}, {0x3e4e, 0x1, {0x3, 0x800}}, {0xfff9, 0x3b7, {0x0, 0x1}}, {0x6, 0x8001, {0x2, 0x6}}, {0x1ff, 0x80, {0x1, 0x9}}, {0x2, 0x7, {0x3}}, {0x400, 0x1ff, {0x0, 0x4}}, {0x6, 0x3, {0x3, 0x3f}}, {0xfff, 0x7fff, {0x1, 0xa0a}}, {0x5, 0x7, {0x0, 0x8}}, {0x3, 0x6, {0x0, 0x1}}, {0x3, 0x82b5, {0x2, 0x8}}, {0x9, 0x4, {0x1}}, {0x1, 0x80, {0x1, 0x1}}, {0x200, 0x8, {0x1, 0x8}}, {0xfffb, 0xd93, {0x2}}, {0x8000, 0x7, {0x3, 0x1}}, {0x400, 0x2, {0x3, 0xffffffe0}}, {0x1eed, 0x4b, {0x0, 0x3ff}}, {0x9, 0x7f, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x8, 0x2, 0x20, 0x1, 0x1b, 'syz1\x00', "ff202dc2fd5fade9c9340c412b8fc486651a9770184ce079b7ed1540c86d8b1f", "f3cf0a683690d80da92cd22af42aa0a5bdf3b5ed26fd9214f0e1c7043de20fba", [{0xf54, 0x6, {0x2, 0x1f}}, {0x0, 0x3, {0x1, 0x5}}, {0x6654, 0x1, {0x2, 0x13a}}, {0x5, 0x100, {0x2, 0x1}}, {0x5, 0xff, {0x3, 0xfffff000}}, {0x34ae, 0x7f, {0x0, 0x200}}, {0xff, 0x1, {0x1, 0xe81f}}, {0x7, 0x3ff, {0x0, 0x2}}, {0xfff7, 0x4, {0x1, 0x1000000}}, {0x5, 0x9, {0x0, 0x3}}, {0x8, 0x6, {0x3, 0x8}}, {0x6, 0x0, {0x3, 0x1ff}}, {0x568, 0xffff, {0x0, 0x1}}, {0xdcb, 0xe1, {0x3, 0x2}}, {0x7, 0x3, {0x1, 0x7fffffff}}, {0xb25, 0x4, {0x3, 0xbb5}}, {0x20, 0x3ff, {0x3, 0x401}}, {0x200, 0x3, {0x3, 0x1}}, {0x3, 0x9, {0x0, 0x1000}}, {0x8, 0x9, {0x3, 0x8}}, {0xaa, 0x1000, {0x2, 0x7}}, {0x9, 0x0, {0x2, 0x401}}, {0xb78, 0x74a, {0x0, 0x3}}, {0x8, 0xe410, {0x3, 0x9}}, {0x8e7, 0x8001, {0x1, 0x200}}, {0x200, 0x2, {0x3}}, {0x1, 0x7fff, {0x2, 0x9}}, {0x2, 0x9, {0x3, 0x1}}, {0x8, 0x6, {0x2, 0x99}}, {0x7f37, 0x704, {0x3, 0x401}}, {0x5, 0xff, {0x3, 0x2}}, {0xfbff, 0x81, {0x1, 0x4}}, {0x98e, 0x1, {0x0, 0x10000}}, {0xffff, 0x1, {0x2, 0x5}}, {0x101, 0x80, {0x2, 0x8}}, {0x4d4, 0x101, {0x1, 0x2}}, {0x7, 0x3, {0x3, 0x1}}, {0x20, 0x200, {0x1, 0x10000}}, {0xffb8, 0x401, {0x0, 0x9}}, {0x401, 0x3f, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x0, 0x7fffffff}, 0x4, 0x81, 0xfff, 0x5, 0x10, 'syz0\x00', "591eed88d5d302bb8fca5f155592320cf73d407c9bb54e611419fb9105bc342e", "90fab635084f72d72ccc3ab85a4352c920f1a1bc9c5c945e7934ba5a7d8eca7d", [{0x3, 0x0, {0x0, 0xff}}, {0xa52e, 0x7f1, {0x3, 0x6}}, {0x2, 0x6, {0x1, 0x1f}}, {0x8000, 0x8000, {0x3, 0x9}}, {0x800, 0xfb73, {0x1, 0x7}}, {0x3f, 0x5, {0x0, 0x80000000}}, {0x12e, 0x1, {0x3, 0x80000000}}, {0x4, 0x3, {0x2, 0x1f}}, {0x9, 0xffff, {0x2, 0x1}}, {0x0, 0x401, {0x1, 0x4}}, {0x3f, 0x8000, {0x2, 0x5}}, {0x3ff, 0x3, {0x1, 0x5d70}}, {0x0, 0x2, {0x2, 0x91c}}, {0x81, 0x0, {0x2, 0x8}}, {0xdf8, 0x4, {0x1, 0x7ff}}, {0x25b, 0x8000, {0x3, 0xffffffe0}}, {0x1, 0x1, {0x2, 0x1}}, {0x8, 0xffe0}, {0xff01, 0x6360, {0x0, 0x40}}, {0xa988, 0x5, {0x2, 0x9}}, {0x3f, 0xc649, {0x2}}, {0x3, 0x2, {0x2, 0x8001}}, {0x200, 0x1, {0x1, 0x4}}, {0x6, 0x730, {0x1, 0xe1b}}, {0x1, 0x401, {0x3, 0x914b}}, {0xff60, 0x41f4, {0x1, 0x400}}, {0x400, 0x4, {0x0, 0xffffffff}}, {0x0, 0x2, {0x3, 0x4}}, {0x3, 0x36, {0x0, 0x8}}, {0x7fff, 0x6b63, {0x1, 0x7}}, {0x9, 0x7, {0x3, 0x5}}, {0x5, 0x3, {0x0, 0xfff}}, {0xb84, 0x1, {0x3, 0x10000}}, {0x4, 0x401, {0x3, 0x7}}, {0x8, 0x101, {0x3, 0x1}}, {0x81, 0x7, {0x0, 0x1}}, {0x9, 0x100, {0x2, 0x8}}, {0x5, 0x0, {0x0, 0xdcc1}}, {0x0, 0x200, {0x3, 0xfffffffd}}, {0x4, 0x2fc2, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x10000}, 0x7, 0x3f, 0x7fff, 0x591, 0x7, 'syz1\x00', "8957002e1538a0af594fbc89715a9161a8826ecfa6ff21221e028f3f477e8539", "fa357b32596af5451c4575c04364f67eb65179a2ab03223a97bc42bf535c0dd6", [{0x8, 0xc17, {0x0, 0x5}}, {0x1, 0x4, {0x2, 0xfffffff8}}, {0x8001, 0x4, {0x2, 0x7ff}}, {0xff08, 0xbf78, {0x3, 0x6426}}, {0x4, 0x4, {0x3, 0x80}}, {0xffff, 0x8, {0xbacde4b902796811, 0x4}}, {0x101, 0x9, {0x1, 0x8}}, {0x0, 0x6, {0x1, 0xf706}}, {0xc9a, 0x1, {0x0, 0x3}}, {0x2, 0x1}, {0x0, 0x9, {0x2, 0x1f}}, {0x8a, 0xf81, {0x0, 0x8}}, {0x8001, 0x4cee, {0x2, 0xfffffb59}}, {0x0, 0x1fe0, {0x0, 0x4}}, {0xfffc, 0xfff, {0x2, 0x8}}, {0x0, 0x100, {0x0, 0xfffffe00}}, {0x5, 0x5, {0x2, 0x3}}, {0x2, 0x8, {0x0, 0x4c28}}, {0xa6, 0x221, {0x2, 0x8}}, {0x5, 0x0, {0x1, 0x7}}, {0x7, 0xcb01, {0x1, 0xff}}, {0x1ca, 0x9, {0x0, 0x5}}, {0x5, 0xc350, {0x3}}, {0x1000, 0x17a4, {0x2, 0xc1bc}}, {0x401, 0x101, {0x2, 0x4}}, {0xffff, 0x2, {0x3, 0x7}}, {0x3, 0x20, {0x1, 0x1dc}}, {0x1, 0x7, {0x3, 0x7}}, {0xff, 0x65f4, {0x1, 0x4}}, {0x6, 0x3, {0x3, 0x1}}, {0x6, 0x3, {0x1, 0xb33000}}, {0x7fff, 0xff80}, {0x40, 0x7, {0x3, 0x78b}}, {0x1, 0x4, {0x2, 0x2}}, {0x7ff, 0x1, {0x3, 0x7f}}, {0xd58, 0x8001, {0x2, 0x99}}, {0x81, 0x6, {0x0, 0x6}}, {0xff34, 0x8001, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x20}}, {0x6, 0x8, {0x2, 0x501}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$cont(0x9, r5, 0x0, 0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/pid\x00') ftruncate(r6, 0x8) r7 = dup2(r0, r1) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r8, r9) [ 400.909724][T12249] dccp_invalid_packet: P.Data Offset(0) too small 01:14:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:14:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x46, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x2b8) 01:14:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:27 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561b, &(0x7f0000000140)={0xf0f000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 01:14:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) 01:14:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 402.026495][T12277] dccp_invalid_packet: P.Data Offset(0) too small 01:14:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0xd}, 0x40) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4640003d00000000000000000003000300ff070000b3000000000000004000000000000000a000000000000000ff03000000003800020009000600090051e57464ff7f000009000000000000000400000000000000050000000000000003000000000000000100000000000000000000800000000005000000ff010000000100000000000000000000000000000200000000000000020000000000000009000000000000008100000000000000e08b68ab3e6103d3c963207eeae814ac9e6a228588cf35a117a7c02873f000"/1486], 0x5ce) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2c8703, 0x0) dup2(r6, r7) 01:14:27 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561b, &(0x7f0000000140)={0xf0f000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 01:14:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) 01:14:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561b, &(0x7f0000000140)={0xf0f000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 01:14:28 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561b, &(0x7f0000000140)={0xf0f000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 01:14:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) fstatfs(r3, &(0x7f00000000c0)=""/125) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:14:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:14:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x5, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 403.239678][T12310] dccp_invalid_packet: P.Data Offset(0) too small 01:14:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) 01:14:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x5, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 01:14:29 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000004000000001c0012800b0001006272696406002700f000000000000000000000009fcf6b3bd218a62020a83b66037add81820d29e57152e4e707fcf506ccbcd0334eca4559bd0216daffe68e12c1766bcb983aae9e34ce4828eab7b103aa3fd8d517d56f36dd9a72f169c01628de94004d7a34fa10f0b1d9735f2cd39e6c3e0f8479548e0eae184346b49606d0a04e8e3b9debc8b077d5a5b158aa9381ddf34a2c7489deee4d4597f6eba1a066f706e5"], 0x3c}}, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000001a80)={0x5, 0xf2, 0x6, 0x7, 0x54, 0x23, 0x80, 0x81, 0x8, 0x55, 0x8, 0x8e, 0x6, 0x8}, 0xe) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10044000) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r5, r6) r7 = semget(0x2, 0x4, 0x20) semctl$SEM_INFO(r7, 0x3, 0x13, &(0x7f0000000180)=""/244) 01:14:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) 01:14:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x268, 0x268, 0x0, 0x268, 0x268, 0x460, 0x460, 0x460, 0x460, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 01:14:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a000000290200020000000200000000040000000000000000000000000000000307002e2f66690c6530"], 0x2a) dup2(r3, r4) [ 404.131755][T12339] dccp_invalid_packet: P.Data Offset(0) too small 01:14:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x5, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 404.248539][T12338] xt_CT: No such helper "snmp_trap" 01:14:29 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000000080)) 01:14:29 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r1, 0x6}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000380)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000007", @ANYRES16=r8, @ANYBLOB="010027bd03004331edde66ee"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x1) getrlimit(0x4, &(0x7f0000000180)) [ 404.343925][T12344] xt_CT: No such helper "snmp_trap" 01:14:30 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000000080)) 01:14:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x5, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 01:14:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x268, 0x268, 0x0, 0x268, 0x268, 0x460, 0x460, 0x460, 0x460, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 01:14:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000080)={0x9, [[0x6, 0x8e6, 0x20, 0x3, 0xad82, 0x3, 0x6, 0x1], [0x5, 0x6, 0xbff, 0x88000000, 0x4, 0x7, 0x1000], [0x800, 0x3ff, 0x5, 0x1, 0x4, 0x69, 0x6989, 0x7b]], [], [{0x800, 0x5, 0x0, 0x1}, {0x9, 0x8, 0x0, 0x1, 0x1}, {0x3}, {0x1, 0xb19, 0x0, 0x0, 0x0, 0x1}, {0x100, 0xeea4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x38, 0x1, 0x1, 0x1, 0x1}, {0xf8000000, 0xfff, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x3, 0x1}, {0xffffffff, 0x1, 0x0, 0x1}, {0xe6, 0x800, 0x1, 0x0, 0x1}, {0xc0ea, 0xffffffff, 0x0, 0x1, 0x1, 0x1}], [], 0xa5}) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x80, 0x9, 0x8}, 0x6) 01:14:30 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000000080)) [ 405.155144][T12368] dccp_invalid_packet: P.Data Offset(0) too small 01:14:30 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x4, 0x1}}, 0x26) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 01:14:30 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000000080)) [ 405.439881][T12381] xt_CT: No such helper "snmp_trap" 01:14:31 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x4, 0x1}}, 0x26) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 01:14:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xfffffffffffffe00, 0x0) dup2(r3, r4) 01:14:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x268, 0x268, 0x0, 0x268, 0x268, 0x460, 0x460, 0x460, 0x460, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 01:14:31 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 01:14:31 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) 01:14:31 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x4, 0x1}}, 0x26) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) [ 406.168083][T12398] dccp_invalid_packet: P.Data Offset(0) too small [ 406.330606][T12407] xt_CT: No such helper "snmp_trap" 01:14:31 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x6}) 01:14:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x101000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r8, r9}}, 0x18) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r10) 01:14:32 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x4, 0x1}}, 0x26) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 01:14:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x268, 0x268, 0x0, 0x268, 0x268, 0x460, 0x460, 0x460, 0x460, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x220, 0x268, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 01:14:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x6}) 01:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008aec1, &(0x7f00000000c0)) [ 406.924899][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.951637][T12432] xt_CT: No such helper "snmp_trap" [ 406.964179][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x6}) 01:14:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfffffff, 0x9ca1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8ce, [], @value=0x1f}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000100)={@fixed={[], 0x10}, 0x401}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r5) 01:14:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 01:14:32 executing program 3: clock_getres(0x7, &(0x7f0000000000)) 01:14:32 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x4) [ 407.450644][T12457] dccp_invalid_packet: P.Data Offset(0) too small 01:14:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x6}) 01:14:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 01:14:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x2}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c50d7ad7f29464d580000000000000000000000071f5ee81cea92ee2d4e7102c0d7c1a160126fcf0c2253f1fc4c04d111b347fb2f2d871ca85a732450e557", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006002700f0000000"], 0x3c}}, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, &(0x7f00000000c0)={0x5, 0x100000, "2ba8c7a35dbc26e5cb16d5d1a358a3b502eeae54b3f96f81", {0x8, 0x2}, 0x7}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) dup2(r3, r4) 01:14:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x2f, 0xe8, 0x4, 0x8, 0x12, @private0={0xfc, 0x0, [], 0x1}, @empty, 0x80, 0x8, 0x101, 0x6}}) clock_getres(0x5, &(0x7f00000002c0)) 01:14:33 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x4) 01:14:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)="2e0000001a008104e00f80ecdbfbe1ee8080eee90cdc556a6c3255200e001e00810040fb120f0100040fda1b40d8", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) [ 408.160235][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 408.193417][T12482] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 408.250099][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 01:14:33 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x4) 01:14:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r6, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x578, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd0, 0x3, "92bae1b014c6121f7f4b1fbdc73327fd3274829ef9fdeca8ff2895fb91e8de2c77f62e048aa884763a63fec5a99103a783cc1992d20bb7ac815b97969164a93f3e173f45e15d2df77dfff5717e190427d04a1573696b62c689a5875198ee32e02ac7b9c9b808724cef698cc97e967f14097cd3f8694f4b66392560d49166c7a210298db3801a9b51e593f219f9f6ea17f02484908198e581ad025a7200665c4c035445fd61bae7aa30e7423f244066d19238ea0013842d8c82b235607f365c729c774791c5adb167c4421566"}, @TIPC_NLA_NODE_ID={0x25, 0x3, "a4f92ad399368957a50f5b20bc91296d042f29826869d4fda69e8ba69435ac941d"}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "7fc3656e5f28761daecc1e62fbd9f5fbad333de33d9c6ebb9fc9d326c267ab83702168c140d21808a4f60ccdc66364c1cb29b1676e2835d9ac867e852823a0f13c2c4e3d234078daa649410eeec6ebad758df4785a6be3cfb5318035ad136e634ea42379834099633064224e825255a32f048a7269629da29e1dc0853b286a27d6a7cdf59f79447e8cd9601f5731d5632a99fcf2de88bc53b759b4acc7d525552526fd87ad7f8a0917a6a2208524b4277f8a4c444b2bb98aa80c381d5f4e3b2ed1c609d04312ba0f1ec76c0a240cfafe57a941ade268df825f46cd1086b68d1d20c4f85b044abad6e22e8e688241d8c2d34e5d98fc666f9981c3"}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe529}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc8b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1df4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ad987e8b7bcfb34b28e428b50b411cd7b6f1767be9e97f6878"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "923c24c63e16941657be862872bce59e4868fb5b7827c6655625149f3c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x103, 0x3, "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"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf012}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}]}]}]}, 0x578}, 0x1, 0x0, 0x0, 0x1}, 0x4008804) bind$phonet(r5, &(0x7f00000006c0)={0x23, 0x8, 0x3, 0x9}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r8, r9) 01:14:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)="2e0000001a008104e00f80ecdbfbe1ee8080eee90cdc556a6c3255200e001e00810040fb120f0100040fda1b40d8", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 01:14:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x140b, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) clock_getres(0x5, &(0x7f00000002c0)) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40080, 0x27, 0x10}, 0x18) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) [ 408.513559][T12497] tipc: Enabling of bearer rejected, failed to enable media 01:14:34 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x4) [ 408.608863][T12502] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 408.639397][T12503] dccp_invalid_packet: P.Data Offset(0) too small 01:14:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 01:14:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) finit_module(r0, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r7, 0x110, 0x5, &(0x7f00000000c0)=[0x3, 0x1], 0x2) dup2(r3, r4) 01:14:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)="2e0000001a008104e00f80ecdbfbe1ee8080eee90cdc556a6c3255200e001e00810040fb120f0100040fda1b40d8", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 01:14:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x9, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r5, 0x7ff}, &(0x7f0000000040)=0x8) clock_getres(0x5, &(0x7f00000002c0)) 01:14:34 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) [ 409.243061][T12518] netlink: 'syz-executor.1': attribute type 30 has an invalid length. 01:14:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:34 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 01:14:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)="2e0000001a008104e00f80ecdbfbe1ee8080eee90cdc556a6c3255200e001e00810040fb120f0100040fda1b40d8", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 01:14:34 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x400, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x8060, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x4}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x375c}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200180, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0xfd4b}, 0x40) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) 01:14:34 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) 01:14:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x1, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdr={0x40, 0x15, 0x0, 0x70bd2b, 0x25dfdbfc, {0xa, 0x40, 0x82, 0xfe, r8}, [@IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, [], 0x1}}]}, 0x40}}, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000040)) [ 409.642026][T12540] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 409.664936][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:14:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) 01:14:35 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) [ 410.111629][T12559] openvswitch: netlink: Either Ethernet header or EtherType is required. 01:14:35 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) [ 410.360167][T12545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.401203][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) [ 410.549580][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 410.833936][T12580] openvswitch: netlink: Either Ethernet header or EtherType is required. 01:14:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000100), &(0x7f00000001c0)=""/131}, 0x20) 01:14:36 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x3}, {0x0, 0xffff}], 0x2) semop(r0, &(0x7f0000000300)=[{0x4, 0xffff}, {0x0, 0x8c}], 0x2) semop(r0, &(0x7f0000000000)=[{0x4, 0x1}], 0x1) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000240)=""/174) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000180)=""/46) semctl$IPC_RMID(r0, 0x0, 0x0) clock_getres(0x5, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 01:14:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) 01:14:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000ecdf2ed6001c0012800b00010062726964676509000000028006002700f00000009a640ef1a79da9293b8eb4cbc106178e856dfd9e27ea75e5a98599857e4c9e00c4cf540f6824de7d1f8e185e11ff5783394b3de0d5a90ca4b652f69ca5974c018ed73b530fbf4b01c27e5bdda7242908a87a8276c72d2f4f0bbafa056995b9f6507ff25cb97fd5d245bdd186a08ad744df7001153cef2e3cc4af75aec6e8a6ac71e95ab23e7f8531196c1dca123435f255febdb2e784dea6085c318041a25592c1955f542241ee1f83397b8975291c46b0c73d7029e5845c0478e9990b74bd94312389e1fac914"], 0x3c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000000c0)={{0x2, 0x0, @reserved="8c4212d4a156fe2b706f42b0fccaab3f8a051cc558c1f7e17ce50a3f400872c7"}}) [ 411.318257][T12599] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 411.731033][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) 01:14:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:14:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000001140)={@void, @val={0x0, 0x1, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:37 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0xa, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@txtime={{0x13}}], 0x18}, 0x0) 01:14:37 executing program 3: clock_getres(0x0, &(0x7f00000002c0)) 01:14:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x40}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x86830c97dcc46cc1, 0x4, 0x4, 0xd}, 0x40) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000040)=0xff) r5 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x9) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) [ 412.129396][T12611] openvswitch: netlink: Either Ethernet header or EtherType is required. 01:14:37 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @remote}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) 01:14:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$snddsp(r6, &(0x7f0000000040)=""/92, 0x5c) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000013c0)=ANY=[@ANYRES32=r3, @ANYBLOB="070000007d0e52f3d668e905806c3ff6f08646289bab0e8d154210a6bcb1b485c51a21b88b72582af608f36556bb2ed67cafc615e9e3997415936bc5f84187936e551dc632030a2b55c6039187819bd4d776e5d44ee2452df11af6c97adcdbf73ef2feb79d5b060b517e226146ec97f35bfef5165dddb40347715850f54b83087f7075cf5d21d3ff90d23c7b6ad4e04595e3925f9cabc9bc48dc44c6c2d5a171af0aed883ac1759a8b4c91526bdccd4e2e0c468991bfb4da163ece31528607d614939a326d72273e19f19574aa986a1c1faf8cc6cb2b43c6a1f20e3b5694e9252d401c352bff27768d647770f532899b53224e0a0b17adb4335e354f0045de3a7dff8fe06c6cedbe5dff362cf4c34cfbb67efaf282f0b9e3115a9bc4369dbfeba547f1c4ca6275bf93e653846fe2aee04fdb9a506fe2cf500a051d7aa11e24f5e911145b75440a2cfb182b007d379a2d164071dad3223683b4158cce9076fb3a4c3f5c0c2310ab97a533c28b269c538893d156f175a626fb615e690607baa1f8af2873a7b43dff17ee5bd026e583e07520922a067e3231e7040729fdf57456a23fb395c122d564b93273c6c76279dc71c07853a2a506c01c109c399432c54c4407fd8b36d985e09a243a352c7b17560330c7098973377c83735ff485c423ac3341b7b96241e586d7eeb630583cbe1aa0a26830fd24ae01547d5b9877b5ac0bc20ef370a47c0d35df67c68d897208b16156276efc6b2e380ad85b14f7d5474e036643bd5fe797998e256430bf01066d3ad47ae2cb1bd728aa4f3c014f070aea52d0aed6bc140732cdbac12d31e431a40735c5a1907faed13f5962792ba4b36008ac03047d0125160cec9e1b0c3bcf6cecc09367f7b7329ec1d9b5da7e3cdb2219a3b58ae264cdd01c0355c4c0c236911ea8763d5d8a4eb114aa5a21c8686d174fca3d595d09895d87ae0899b17e91492e192588e3a368a33d701a64bf2ff1feab11119b32fd7f80c9b8a743fd13e8148d89270c7d8b2a78fe1fd574a69666ab46370c56afdb5e5aa5684216d317560e0aa2cfb3327df32ddd30caaa90f06bbf99488ca00fad035383fa3acf557c026330e74b1e36f8e0107adfc5f5f059db6e926d51fb6dd0be903f636db2f209888b2a5d3a8033a08654ea2c9a7bf1af0ecb434eb50fc6adf78290a63d751eb8e2d4c1bc652cef112e76c36c2106c4a60dfd6c6d2e3e8f8f6eeef0ae1786a6f5866dbb092767886252aafaba1234b15832592df131a72d394961ebbd71f53e05fac4331edb2221cf65dfe62c7b2fbcd2b3a1957aad2dd65a9eff029a2d903c182c803f0c129c3bd62a277acb966d7532abf44fc6b150cf02255be6c604ecbab0a59724a673700439053a21c268d0b6a4c82513a47782dca370ae587440689fac1598dd2d3c147facd1d3b147a8f5ac94392c73c4d5437afadf6c094ef042fe3295717fb65928d9a3e0c9a0c802385a8b558743ca0c85536373f7667e108dfe7acc13eb15e0b1eff394e23c73a4256c554b6e12024bf1b18bdc456f8bcf038e53b430e6c335ef09a1232bba7883362824c24875c0113c3677458a528764b53cf4155a4406dc1d06492e8c9748645817358f8c177d730a82d8406ea97d40544b3d8c20cbfb1902f700d89c4f52b49683ed6140d04d516173d5d40fa701fe515f0a473094b91a52964cf9b0b74811f993678b29d56ce9dd9210d95d6415f13f001169b9769c14726841aac934c5fb3ccc406adf0d142f16d7284ed1a3a40cddc5a83e7dc1fdb69ef564dc44ae302b621ddf60ce7d9038a12fc998fe80bb9e1ddd24b3b071ef31418391518b255923aa81480bff4c439fe3106bd789107ddb72173cf2b6236525124bf86c908c4e4d394a7f89783cc2645511e1b67d6ea4b9b97539365ff316ae6d055837dabfab92e69fc82309ade82666d754bf5a239a89fe16ed19b3a2502fa3a98872b25a1117a419aaa60764cc91077a41ca612c1e9c4e85b1b0803c2648b65837e7071ba000d1fb89b2abd9adcfdabe5c2dc7ad7ec97702a5f425e6de4bbecea113639f15f0ef007691ed251a26d55cbeb381130af20cb4a59b3d8208c617cfc4b80797ae76dcfa7106a8bf716148914363cb9899a4e168476f27b1c1b5c5918456252c42a30e78f2387b96ee7df5ab0800171bd858a62db34dd600288587a1d7542eb3e49995e3e1106d60168755e7f60156c52b93456cea18c2a41469b38788eeb32d812b34e657a5916339fd0240870ceb3d5d22ff81f374360d75eed719e62431774e11c308667c349288882e245e81107d9f7432aea1007d9503706a31e4da12bd9792f07c267a182d6f631bb98a3a62a6eff35417becf135caf3ba30ac6337bed09630cda55b55b6f10e2144d24488f457e458e25b0ba996e0e9dd97ce288e74031b5f19bc5ee69e6f71a8135142c66ea03cb2ce315d1d6f302382d1e8b4b4ac9786209414332b2baf51248ef10336184d803c21a8792d1a3d87358496adfb31e4c3028cec98840750222289a6594fd262b930319bf23cd34b0411442a4b9b85f2dd2ec0db9dd2243ea0618977a35b944a52399a74d9b870a7589ef9692bf351cc0676085d7c925d6d32b40dcd6599257395ff1dc25d5678f19d8f3661dccbb1c69c03fdee2c1f2c745161ea1b2e4a4ec156beee7bb16ee24c3c90cbf76eaa66aa149f67ab9a14dc134e680d5086deb909809a92c6fdd9e7d5282ae13251bc6b1f4293ed3a1360bd6c0054c84c143a220a6c2d94610b4a8721d7ee86d85fe073bd765e45748ba67819475752d3b3cab81ca2fcbdfb57890b9169bc40aa7c7867702a7e4d68a1c36a2850ab26ee8ed786966c6e8bbf1c36fd802ab6b80d6174f0285aaff4bcd326b7f73b331b576318c31e8c433cdc3ef6f1fc0c0f1caaec93312161a937aaaad48e75b869dd2f525ccc251398692a9f65f2b0901d6dc4f82cd68ba811e0badf55af96cbd1b32fa5e58cfc0a1cfa8f5ff7ae68c99bcc532fb86d4fb47d8e315a06c550c0f84fc6735e893740fedf22cb8c11b4cccb8f5f5e0978985ab4ed0f8297704ab19b103c1cdafd1fde6b6e1937c45612ae76e08c3bb9b6dbccdef01d20141d87b55c33620115824d3f3aa3148d84380c5981f32a9f2bbf0316aca40c2454730fb4ba347ee967ca7b00a148658c54f6bf1ffa659084ef94313baacf25acea5001d31554e440a6d766a56bfa3a59e79e6de291479a164da81cd72a13d704d3380bb17f98fc9665dce4713cfaf0566a07a1d4c30133d5d72bee6d960f8bb2dd5673942f505f614b337de43fea94c81a14b1f88a4291d40ef44255a7acac45cb0543d52f1e610b107a66b7c9ca59d7e99336cc5068512ad7da500e870993036747d09b53322592f22b167ff619707e2d41d97205228b520941565601da6d04ffbac226464332bae253cac1e529c6b8034ec8e9aaf44c2f7e970395e6c8dabb952188d6bc444625513d5ccada914d739905bb16fbce003db2dc1e412d28cf23a9f8997e339d1174eded15b1f518656b0690afa070b1a3295001ef0a685ce27a586835172d4aec7f3de924cbde71ccff94bf882cc447b690bbb619fa82a61dab0743aeb2aadd5bd448465ddc6e209cd9d269dc3aac6799a8e8143a6b8b1f218c050ffa4847e8ed1a135342b6a17696de835ef927a6b50e9df3ceeb2b915714ce7eb03fd4c9dcc7d8bb6dfc21a89c582232655d2f78d1696aa550b0e156c8d3435b300a8d2c7fe5fb38c506ac869d708fe0ce79e7b7db79fdf656933b63488a055343efa7fe1eb8d4239ccfb790c4550ca2fa334f3474e82e3e64eecf2c79c2f7a04adf841b4b5f816dfbecb2a0091c679a1aaa9cdaaa21bc6aa110806618c25a0deb14930f640e8290e1da491bfb4448f9d6a356c2415eb6fa1d1d205fe44b455eb564fd82eb2aed7647daaf04aafceb51523ac0acce7e267fe04a688184a6c07b16bbf7b986a62609a5f3cbfb91d10d1c74d4502648cc2308e554ada72391e3139d20b5d57c77834b5ec0ee77bf73949bb9ca3ec73140a78514048b1c3ddb8d8da3495ec82b94a2cf3f79aa413e4164c041d584c91a73af3f60d9e66bf273f69024f6a4b99f2f11777c7ad4c85bac0b5f1cafa389c2e5c2efa9f1f1aced078821c5817b2b9db295dc63fca2c72615e078e77340076f59ec4207ccba4c58de69beab8485d11883dc70941c8b6b7234d84b8579edf5165bc9e825c5b70c77f2afae666b12edf581fc1c69382a1379700a3a993e56b8a26639a910e7e3c98a2896126bdbc5e2144aa00d501ee79d54d40607750ba8204ddd7eb8483d0465ccae4ba43b0d3f0cdc3d152a05c703433d19c85941c2f04deee7d382d47095097f2ae6b83370a260540b98315a127d6cdadd8a7c91c0cdc74a5a64a90d53d943d2b614443c3a8bd1e08152868f8c516d868643c2a4d0844b37698dd79b1deb7730c300fcfd061d3b69c629b939e370040709b7a552dfd3f09dd76735a1e805e3e9e7a11b4954f79c66dcf9262260a37833cb9ad72aed38302a2bb664b78f8e09dbf484a0a8cc3d1cdf48155a3e397556a48b10df1bdafd674a73293d317573544eb580084612a66ddb11949efed25c448d07d36e284e12ee67e37852afa49b62ad7ec35e1a413c75617699c678c878a81e86cb9055ab004aca328914ec1f4b61604c8450e6f916f38fdf3b7aa4fadd0d823448564ed7d7d93e98a7b64a862d2c059717b37dd4d2645c7188c55d2d9c905db814bd6b8a32e3bf0af5b55e7a6251b8102c4fd18f53a8e237d0ac83ac588440be17667f0ce75a5006f132d0f81dd61456f15a7eac8a1af16d7323cb57197d484def75d14d3c66078cdf1f0dd78aa395ea2d54c608a550781112c5f6905fb5577e736ae5781c38ed1e521d2aad8cd143b1493e1079b563d4ccfae5de61c0cc4b40c4c6763d9557807e877624249577ca9b1b35d5b0949c865bea95b8063ddef05a14acb7f99c6943adf14e90e07f395c052998ff9369b0a0fdbfdc4f527bb1788df7bac16a589bdf5db891932314d17688357724db8c28cea6b31d31778abd96388809cad4fe3d5f59b761405c0744f021d2aeb161c5dd6b2aa510ee64a9969c1fc1b0f1c49d74ca861a99ad30e716b8f3ca7099316c573e6f0845d43617c735ce27a15b89bf918650f028e9981225329c624273be09b3977530f6f9e43b4affeca0332d7eea68f2d4e057a4606088a83f0612f673ad8061afce29218b4465712066bf1583cfffbaecca2029dfe4327b7bc2bf95715a0cba3fa4e1a97c1b13678783fe0ea4c4fccd52948603b9d9019f4c3db1dc8378ff2dba37b169a428ac7182306e05b9a12263ed819c7dbdea27b691655df1bf85f3464cc423af3458a304e6dc448627d383dc5762776bdd5c47a60d2ea0870e7727d3e4b7e6db0879b96c876751422242d69be7e3e482a4cbc9732640de1c7142d95ee3e8a6339ca0844cd39ffaecd4402dc0d38d54c589d747056f7dec022e4a0eeb544c836225e9059d8494102ba97c3689b773f4651f977813ba1f1eaa628d4f60b1cba523b69594597ae2b12a4b97384c4f2b7abd170040d217901e17ffd346da7b9a4d7530f0ce30bcec61ad39576c9b67551ca393ed0c75ad70384e693ca2379b995dcc725434f082d231bc7ccbba13bb6275d9b7522f6a58e1f29a98bfb66a40866fdd1d37215f7ec20f0f08f9708bfcc93598f447be86aed70666bb1a294386b3882cdd63419639fc5ad61de863019869eec13c15ac645e24fcce4b9ba8500000000000097eb2b136ee241a8d46854ba6cbcdcc4c9f23467c7c1dec5d255bd69aa992b8539e47f689e0cebeabd59e2fab7f47c9850688f3e09cf99902cdba807905d7bcce144be2ed83db7899b7c3c51810526c8d542324163f060063596b542d97cbd3026725bbf370723045501c57209dad8ea9979e4939ad091a18df86e4098433eba49b8df9da672b7d244d8a37e2a9ea45fff4eb30af4c688d72c98b55e0aba0c9ee4fe2e3b9287"]) clock_getres(0x5, &(0x7f00000002c0)) 01:14:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000004000000000600000000000000c6592daa7417950e246816b40c98d185a5deec703548f9ed9c3ca04253982cb7e82eb02a75306e71b7967c5eae1272e910dab980e1d2f9db2b9952eb2060a382d7b3120d3bbaacb3cc3df3dd285ddcd583000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000800b000100627269646765f701000000000000000c00028006009ebe390f2700f000007b5d7dc7cb7500"], 0x3c}}, 0x0) dup3(r3, r0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:14:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0xa, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@txtime={{0x13}}], 0x18}, 0x0) 01:14:38 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @remote}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) 01:14:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0xa, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@txtime={{0x13}}], 0x18}, 0x0) 01:14:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, 0x0, 0x0) 01:14:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:14:39 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0xa, 0x4e22, @dev}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@txtime={{0x13}}], 0x18}, 0x0) 01:14:39 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2e180, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000000)={0x101, 0x2, 'client1\x00', 0xffffffff80000007, "93ff1f5241111bf3", "562e7d1137be0932e158b0c8b22b1f54d97625c80624a8c5754ad0ef5c951799", 0x5, 0xffffffe1}) 01:14:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x0, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000140)=0x0) timer_getoverrun(r3) r4 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc01ff003639405cb4aec12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344324adaf81dcfc6afd98", 0x3b}], 0x4, 0x0) 01:14:39 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @remote}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) 01:14:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, 0x0, 0x0) timer_create(0xfffffffbfffffffe, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x32e5b4a9}, &(0x7f0000000200)=0x10) 01:14:39 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000b00)=[{&(0x7f0000000000)=0x1, 0x2}, {&(0x7f0000000040), 0x1}, {&(0x7f0000000080)=0x2, 0x1}, {&(0x7f00000000c0)=0x2, 0x1}, {&(0x7f0000000100)=0x1, 0x2}, {&(0x7f0000000140)=0x2, 0x2}, {&(0x7f0000000180), 0x1}, {&(0x7f00000001c0)=0x2}, {&(0x7f0000000200)=0x2, 0x1}, {&(0x7f0000000240), 0x2}, {&(0x7f0000000280)=0x1, 0x2}, {&(0x7f0000000300)=0x2, 0x2}, {&(0x7f0000000340)=0x2, 0x1}, {&(0x7f0000000380), 0x1}, {&(0x7f00000003c0)=0x1}, {&(0x7f0000000400)=0x1, 0x1}, {&(0x7f0000000440)=0x1, 0x2}, {&(0x7f0000000480)=0x1, 0x2}, {&(0x7f00000004c0)=0x2, 0x1}, {&(0x7f0000000500)=0x2, 0x2}, {&(0x7f0000000540)=0x2, 0x1}, {&(0x7f0000000580)}, {&(0x7f00000005c0), 0x1}, {&(0x7f0000000600), 0x2}, {&(0x7f0000000640)=0x2}, {&(0x7f0000000680), 0x2}, {&(0x7f00000006c0)=0x1, 0x2}, {&(0x7f0000000700)=0x2}, {&(0x7f0000000740)}, {&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=0x2, 0x1}, {&(0x7f0000000840), 0x1}, {&(0x7f0000000880)}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=0x2, 0x1}, {&(0x7f0000000940), 0x2}, {&(0x7f0000000980)=0x2}, {&(0x7f00000009c0), 0x2}, {&(0x7f0000000a00)}, {&(0x7f0000000a40), 0x1}, {&(0x7f0000000a80)=0x2, 0x2}, {&(0x7f0000000ac0), 0xfa}], 0xd, 0x2b, &(0x7f0000000dc0), 0x0, 0x0) 01:14:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, 0x0, 0x0) 01:14:39 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @remote}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) 01:14:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001bc0)="3982f27f1ed2f89ee849ee68f1948211b354adaf70fc5a207ba04484e4c1963f279408c3b318d5ee6ee438c04e1865827f7e37210e75d45d399f0ce7a184c966f3ad619f76426847182284bcbdc65e1e0ccffa14f8143a2f7ee2190120f04217db5d83707f524f184aee834b531e5a86873d2f1440b06e80406c8c421b79545db144b87b6e84b84271bfd5c62a69a1d59690d56d7ec1bcec6784ce3605dcbaeea841a158e4c0c60746de54956a6bef40e3fb99608695510d174ff32cac01d3b817fda592403596a181cd5c33d5808c0293994e5bc6ebd000d82d304fd67228af02f88effedb56506c17006cb23252d8eb249aff09e8031", 0xf7}, {&(0x7f00000001c0)="81881da4d6497834734cf22a685956edf34b1b75faefd6bc03ecc79e4d50665e65272703bf762a574ed1ab9736c131bb97129c88badba71e68430a4447b0979e2ed8dee95019ef33f09327d92e04cd1623bbb72ca508c2422f00fa0786e9fd13e0ee8a9487e87b7554ee55930442b4a4ce17164a146e2348f8c377ec0f5392b4d3d5d995703ee433e48e504712d7f45fae23b05b1c691549afd1408bce346d930c3e27a7247dcca380f3fd4cc4cbb62f2306541be9a40421f8342627bffa70e1e1841b90c78e60", 0xc7}, {&(0x7f00000002c0)="cca9cececea578fec56aa9358bebc47b301d7c38904c0634facea661d8eeca25e19e94f16532d3fb75c2e343ddcf564498cb1260e121d8f08385c8acb9034ea05934908a1dd885ebe0bfeaf528d7cfd198b443116d4c75af7e5eb86383dbd65f848ad362d7b53e7fd65deb22e1b6de2b8eda4e0c6c27a6f8660064cf78f16718", 0x80}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="ef5728f3d210c33ffdaf3bdade7b58e6eabcd717edc353ff83c31c154516d53b01b1bed1cb5320b3bcc8eccb9fc43b3aee916337ce31172b764d4c65aad3f21cbac1acf4cae9789e766eec148195770c9f7562b20d04557218c45d2cb340f5519858e2d8a274b2ba41d82c6ea2baaa3d0f1c6359ac415c80f0d93e86f9e90c79201be3f297664fdd7d7130ce5392fc", 0x8f}, {&(0x7f0000001400)="2cfd3650cd157c779b3fa0848adcd7f88b01997d52546625f83b48bfd3dd35f29cfa5667c0373e6d7cf0edd03e2eab10bdba871018cdf4fac6276a25411377210e6c7fa081d9927303944c569a48bf66e6a48af6e96b11977bb86760135b98680173e232d052bbe927fde693dff2e971e32310", 0x73}, {&(0x7f0000001480)="1802e036dbd3aab773a55414e08ea8956859117a416d77c9bbe38ebf6dd98fff0cd62bd5ce77271f52e593454b9eda41d9bc73f3fa3eed63748425d05f2c7e1c99477d5d014c79ad639dbda42003124718607c6d0704b3fea9", 0x59}, {&(0x7f0000001500)="f33eaa3192f31f9711c65a7b8ea05f161f7cd0aa41f9467aae9f31bbecaf8145ae7dde67f7d467db727dfff5056c7199d66c876ec8c160a60bdfe6b12d8cb11ee3b2ff4a42c743c887f635bbbc5ff9630530d1ad2e403871e1603433cd732da1bced48be8810fcfbb03445e329fb9aa3469a70fcc08ccbf288b5828d777bf103c900f44016b8a1b3e4bbc805b2df0a2cadc5e86ca977bd6671e2c55155e556953740c5d3d30f947dabff596972eb5a43631b393c42f860", 0xb7}], 0x8, &(0x7f0000001640)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xa0, [@multicast2]}, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x8, [{@broadcast, 0x3}, {@broadcast, 0x80000001}]}, @generic={0x44, 0x10, "35e575276ad35ddb738f76a5a8e0"}, @timestamp_prespec={0x44, 0x2c, 0x7a, 0x3, 0x0, [{@broadcast, 0x200}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x7f}, {@broadcast, 0x3}]}, @rr={0x7, 0x7, 0x1d, [@rand_addr=0x64010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf9cf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x4, "4db4"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xd8}}, {{&(0x7f0000001780)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001840)}}, {{&(0x7f0000001880)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001980)}}, {{&(0x7f00000019c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001a00)="b64493f86824d8aff733435072bb6e73fc9a6f54bbad9fbae8f9713ca3b9e02251043cfb5879fbdbf14c03748630e1bd0a60db0c015ea37cda3479dbbe781f10614c5afa3cba1c30215f8ea99d4a4f4bdf18cea28e1c424a9a3ff778ba6d831e83e8a3172e5f924be8fe99072ea25b2fedecc3c34ae921d64894f3536da78830d23825e4f6363bf6d5321eccfb90adf06fa4e8ea277ef569578ce1ff8f19276aa288f8fb2a6a09bd02", 0xa9}], 0x1, &(0x7f0000001b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1100000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="640101020a018858cbb7140cc4a4a06aaa4ed7e20001010000000014000000000000000000000002000000070000000000000078000000000000000000000007000000004418c2900000006a00000001000000050000009c00000007444c8b53ac1e000100000008b6f4028da0f26eac1e01010000100000000000000004686401010226f01a69ac1414bbfffffffbac1414bb000000087f0000010000040000000000"], 0xc8}}, {{&(0x7f0000001d00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001d40)="9a9df3d1b054b751bf280236c3cef385ebde4e1ad0c43ada18d05186b0ef97b929f146e98f85764c07001b9cc2e1738d84bba7231d06dbc07a639de3923ef420f2c8cb61fae99c3955c897227bcc6f206c5aa54264c6688ce7d5da0fade3dca4548c64e9de2629886bb3ce0a9acd3df61254b8d8a0401782ef0cd445fb0bf43cf1833007041dd01854da324f48d8d0666b28340d4f56f912900b65fe1d4a734d3eb1caef6f9f220d75524b59d7ae4530dc59f4a6dc96e05bcdf5b639ab337bf9e36c48b4066d2e7101e602b7f6fe2bb926ddfe6d0556a44cbfc2b873bb1d5612273fc2a7826a75ef16273f2c94c12085bb8eca8e5560de65", 0xf8}, {&(0x7f0000001e40)="0864965a697e57ecf8e182d2f2386dbb673a1f772289847092e402ec03ec65b4e92268e2a854a3e24b39ab9b08a13195a7fe22b4bf45610998b7bb40cea6971ad1e0e1aabce8f505e70ed9bbb1c830ed1eff7878a39a30ec489976f1afebae07584b19acc1549efe8c41ddec4815dd8c1e0746e0918c5063e30d04fe8c4f6df81531662e4f2782df6261d429923e6521d25b83f78eafeb4a485b8fd10e0645a9cc00de49bcf0cc18504a680b4cdb093e8290429f4912a94dfbe318c602f04d8c4c4ff09cedbe2bba03939fb7b85bd5f9f50a8a31b55500ca86bd1f6ffe94ef4ce8d79aee60747b35c3853064402e5f67621f", 0xf2}, {&(0x7f0000001f40)="1899b24df5735c139542d43b3f46", 0xe}], 0x3}}], 0x6, 0x4000005) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) 01:14:40 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xd}]) io_pgetevents(r1, 0x1cdbcfa6, 0x1, &(0x7f0000000000)=[{}], 0x0, &(0x7f0000000080)={&(0x7f0000000040)={[0x3dd]}, 0x8}) [ 415.243223][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.268641][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.356539][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.382240][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:14:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, 0x0, 0x0) timer_create(0xfffffffbfffffffe, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x32e5b4a9}, &(0x7f0000000200)=0x10) 01:14:40 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{}, {}, {0x11}]}, 0x108) 01:14:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800700010062726964676500220cced300028006002700f000"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800000000000000000"], 0x3c}}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x5, 0x36cc, 0x8}) clock_getres(0x5, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SOUND_MIXER_INFO(r6, 0x805c4d65, &(0x7f0000000300)) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc0, r2, 0x28, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000098}, 0x4040881) 01:14:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, 0x0, 0x0) 01:14:41 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x20000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x9, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x7}, &(0x7f0000000100)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r7, r8) [ 415.641411][T12723] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:41 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, 0x0, 0x0) timer_create(0xfffffffbfffffffe, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x32e5b4a9}, &(0x7f0000000200)=0x10) 01:14:41 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{}, {}, {0x11}]}, 0x108) 01:14:41 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{}, {}, {0x11}]}, 0x108) [ 416.392576][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.414891][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.460150][T12737] tipc: Enabling of bearer rejected, failed to enable media [ 416.469340][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:14:41 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{}, {}, {0x11}]}, 0x108) 01:14:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, 0x0, 0x0) timer_create(0xfffffffbfffffffe, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x32e5b4a9}, &(0x7f0000000200)=0x10) 01:14:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x0, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) [ 416.949736][T12764] dccp_invalid_packet: P.Data Offset(0) too small 01:14:42 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r6, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010008105000000000000000000000000327ca36f068c725420c7c5a189c4", @ANYRES32=0x0, @ANYBLOB="00000000000000001400f1800c09000017000000006170000400028008000500", @ANYRES32=r4, @ANYBLOB="08000300240d0000"], 0x44}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x3d4, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {0x15, 0x1f, 0x4, 0x0, {0x4e20, 0x4e24, [0x3, 0x8, 0x3ff, 0x5], [0x7, 0x5, 0x8, 0x1f], r4, [0x40, 0x94]}, 0x0, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "6631157b45de9c7d8732a978d9ece0a5cbd841f9006c52426a6c855a3ac1e050d11e45ca38a0d5fa3e9ffccb1267fb49152d898276d07f71b10d00be3a3de793445f0f790032e12b6e5cf96aabadedfb509932f80137ba48855e9b1211586e9296f8cd42237823ef90b1221d821088db2c12fc12a1bd808e86ee4892dea975"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "f5017f7a6f499c4bc10845cc0d97b7002e45a745bf5b67588096ea97393a381d85081fd89da783f8f21ff062a867ff38751960e8316f1728c1d1fae2025271bbfa117eac212c882b98bedc60"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "640a9c3cc1f70f4c68d9df991c900d19009b813256dda8353e170530857d3bb7bb23cb99e71e7e7d5cf965e737df2f4cfa79540a179ef8e1a0934b78cd03ee2a3d8922bbdb3ea2434f46983f18c985d6b75c03d3ce4d5b7c0796bf66369be6d58be9f507459259d631fd5e86d83b77c656ce8ffbf80a627e7771a5055ede6aa520aa5f4433286b4c5855e454bd4c571337a8c4551fcd6577112ac837df58efbcc7a1abbe43d3ea07ef0d489eda7ee086bba8c127b763ccfa775b031423d470584bd75f137165c3524f0bf5a1ea15eec54bd720c18959d964aebe9d5d3b067c673feae06fa69f4190a802b87d3cd3fa49"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "fcc34b1c1ca2218e190e0a6f2b9f7ae7ef192598c4efc75fe8ccdf09b42410fb3c67ddb1668f3f3513ca6f06c54ce2ff7be385d74f1f32b1b06e008ad72d04dcd391c1dbab004098ec5e2a17992aeffb928ad8f248caf32bfbadef1148a2adcaea73c9a1eb01b94caa9b383f1a1332548046424b552991ea8b3a48b69fbdea1b2611c9db0497d2085a32acb0993f2810f2e2e4a986204b3c7be72c5254d71e200911183196dd55299f997ea3"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "492f6f93707f2ee9fb679e76d1abcf341d1d96cb14abfe5137c9a97f61f54b5f3fd76b7c1555b59bc6a7d0c9be1e53bea3e93deda322d0374baa7332d3e2c76cfaa68cdf80b3296cf8f00dfdf2b7271dbcbbfeca1ff95388d0584d81b2ef21944a937741ef179098887ab8c8ea3bf035e6322f7beff5a590119e641c7c909127fe17ec9fadc53d32a30dae4845d41f6b462d3f4e58a8ca115631f9ee56c6aecd74c32e1dbb3aa96a0b4b43225688b96febac88acb3"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "099abc17524ca83b0891c766aa37ba7170f0db89be5e477bdaa7cca2465e145086dc6998830a2ec23b76025554ab01bbb1de21f19275302253233967b8714e0d2f16c0635958b070afa6daff56"}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 01:14:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf25030000000500050008000000050005000800000005000200090000000500030007000000050003007f000000280001801400020053c4365d31000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="050005000100000005000200090000000500050008000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000085) r8 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r9, r10) 01:14:42 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:14:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x2, {0x2, 0x0, @multicast2}}) 01:14:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) [ 417.317591][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.380221][T12779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x0, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:43 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:14:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) 01:14:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x2, {0x2, 0x0, @multicast2}}) 01:14:43 executing program 3: clock_getres(0x1, &(0x7f0000000040)) [ 417.838080][T12810] dccp_invalid_packet: P.Data Offset(0) too small 01:14:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r7) 01:14:43 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:14:43 executing program 3: clock_getres(0x5, &(0x7f0000000080)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x110, r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) preadv(r1, &(0x7f0000003600)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/239, 0xef}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/227, 0xe3}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/212, 0xd4}, {&(0x7f00000034c0)=""/146, 0x92}, {&(0x7f0000003580)=""/77, 0x4d}], 0x9, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000a14000242bd700008000300010000000800150001000000080015000500"/48], 0x30}, 0x1, 0x0, 0x0, 0x44094}, 0x4801) 01:14:43 executing program 1: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:14:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) socket(0x27, 0x80000, 0x9) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x0, 0x0, 0x8}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) 01:14:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x2, {0x2, 0x0, @multicast2}}) 01:14:44 executing program 3: clock_getres(0x2, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x7, 0x3432564e, 0x80000000, 0x3, 0x3, @stepwise={{0x7, 0x4}, {0x7579, 0x2}, {0x1, 0x9}}}) 01:14:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfe5af9c07712c130}) [ 418.888131][T12850] dccp_invalid_packet: P.Data Offset(0) too small 01:14:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x2, 0xd, 0x2, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4000}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(0xffffffffffffffff, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r8, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x58}}, 0x810) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f00000000c0)={0x9, 0x3, "7d820fe828ca914a3aaee9aa26ab1d3cea391a9f8fa9b5d259b2ccc79bd8a25f", 0x4, 0x7ab, 0x1, 0x1, 0x28c}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040)) dup2(r10, r11) 01:14:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x2, {0x2, 0x0, @multicast2}}) 01:14:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) 01:14:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfe5af9c07712c130}) [ 419.370879][T12861] tipc: Enabling of bearer rejected, failed to enable media 01:14:45 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x18, 0x3a, 0x0, @empty={[0x2]}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private2}}}}}}, 0x0) 01:14:45 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0c00000000ff00000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 01:14:45 executing program 3: clock_getres(0xf, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f00000001c0)={r0, r1+10000000}, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRESDEC, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x26040010}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r4, @ANYRES16=r6, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb911b1a81d0461a5}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3f}]}, 0x1c}}, 0x20000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000380)={&(0x7f0000000300)=[0x57, 0x1, 0x1], 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x6, 0xe000, {0x3, 0x8000, 0xff01, 0x3f, 0x6, 0x8, 0x2, 0x429c, 0xfffb, 0x100, 0x1, 0x3, 0xa60b, 0x8, "e1079df3be50037cb95841fdf90c566568288a2dbd4d517e3fd648c5df82c82f"}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') 01:14:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x230000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) dup2(r2, r3) 01:14:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfe5af9c07712c130}) 01:14:45 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x18, 0x3a, 0x0, @empty={[0x2]}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private2}}}}}}, 0x0) 01:14:45 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0c00000000ff00000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 01:14:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfe5af9c07712c130}) 01:14:45 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x18, 0x3a, 0x0, @empty={[0x2]}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private2}}}}}}, 0x0) 01:14:45 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="6d800b1188c33cdf528339252716d473f58897780e91d2dc23475d0c7b317805fe89e1a10b354a7877a980024a4f76c52b6f66b5c7d2ac41f38cc43f039813abf9771c5a7d65f92ea5006a086f341efe14755faa6cf1b807a14a6eeb525e1eca898696c6054f2014bacb8a17d021d9067fc78058f4931a7a1ee9e1563f8677869b6aa9d20373e14fce125b7ddb08fe4a0b7723e67b9ea1cd6a1c5db1b78001d415cc6b135c796f2611e7852f436667efe04b291ff93f0382a9ca8eb7dc7eca16407e0e7c4b69f5f5ff07859b804d28dcdf10cd8f7012d2eb94ec11a8faab03e9fb02512d6d58039ea5a054567155d255eb4e", 0xf2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000140)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) accept4$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000280)={0x7, 'veth1_to_bridge\x00', {0x8}, 0x8}) dup2(r3, r4) 01:14:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:46 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0c00000000ff00000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 01:14:46 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000900)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52eee7b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0xfffffff1) close(r0) 01:14:46 executing program 3: clock_getres(0x3, &(0x7f0000000000)) 01:14:46 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x18, 0x3a, 0x0, @empty={[0x2]}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private2}}}}}}, 0x0) 01:14:46 executing program 1: unshare(0x2000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) fsmount(r0, 0x0, 0x0) 01:14:46 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0c00000000ff00000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 01:14:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000001140)={@void, @val={0x0, 0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2a) 01:14:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4000004, 0x4, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:46 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:14:46 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x7) clock_nanosleep(0x3, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) 01:14:47 executing program 1: unshare(0x2000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) fsmount(r0, 0x0, 0x0) 01:14:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 01:14:47 executing program 1: unshare(0x2000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) fsmount(r0, 0x0, 0x0) [ 421.876922][T12972] __nla_validate_parse: 3 callbacks suppressed [ 421.876953][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 421.928673][T12975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.988545][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 422.041578][T12975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:14:47 executing program 3: clock_getres(0x2, &(0x7f0000000000)) 01:14:47 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_GET_SERIAL(r0, 0x80044324, 0x0) 01:14:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 01:14:47 executing program 1: unshare(0x2000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) fsmount(r0, 0x0, 0x0) 01:14:47 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 422.568959][T13008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:14:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$dsp(r2, &(0x7f0000000000)="78e1a0eb578adc2a329d303ce6437eee3b20da2ab0b2c8038b500629c484ec5055134d0ca226fe18497d9d6c902c890dce3b79155fe0240a01272cdb176a21a9c2b5184a0118dded23ff04ecb69c35e3454304e4ef1ed920cbcebdc8d1f91565443acabd3dd3d8122affba97e6e06312f2f4b054763bce57f6c96aada9190ec4ddeeedc91ef7fb410b", 0x89) clock_getres(0x5, &(0x7f00000002c0)) [ 422.668113][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:48 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_GET_SERIAL(r0, 0x80044324, 0x0) 01:14:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 01:14:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 01:14:48 executing program 3: clock_getres(0x7, &(0x7f00000002c0)) 01:14:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 423.109070][T13025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.124819][T13024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:14:48 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_GET_SERIAL(r0, 0x80044324, 0x0) [ 423.197243][T13030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 01:14:48 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x400, 0x7}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400140, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x49, 0x1) 01:14:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 01:14:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 423.597852][T13041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:14:49 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_GET_SERIAL(r0, 0x80044324, 0x0) [ 423.742564][T13052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.759473][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:14:49 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x3, 0x21, 0x17, 0x1e, 0x8, 0x3, 0x6, 0x7e}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="83327cf23441ba0c1ea5670fadba429a", 0x10) 01:14:49 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ceph\x00', 0x0, &(0x7f0000001800)='\x8c4.\x82\x8a\\\xa3u\xa2\xbb\x01\xec\xf3\x9d%>\xf3\xa0\x9b\xd1Vc\xd9\xedb\xe0\x10\xda#\xaf\x13\xf5C\n\x18>C\xe3>\xc6&2%\x01!\xf9\xd6\xd2\xee\xe8|\x9f\x88\xa8\xa3\x01\x85+\xf7h\v\xec\x8e\xe8\x14\x05\b\xaa\x8d8gG\xae\xc3#?\x10\xf5Mr>\xa4\x02W\xc8\xd2f>\xcb\xdf<\x94\xe1\x15Q\xa1o\x1e\xfb\"\x9b\x85`\x1f\xf1\x13j>$\xa2`\xaf\x0e\a.-8\xd7]\xfdC>\xe3\xd68\x10\x04\x00\x00\x00\xfbtQ\xe7\xd2\x06\x9f\xc2R@vDt\x00K\xf1M\x81/\x8d\xd5T`\xae\nce') 01:14:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800100000000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@mcast1, 0x37, r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') [ 424.136676][T13067] ceph: Unknown parameter 'Œ4.‚Š\£u¢»ìó%>ó ›ÑVcÙíbàÚ#¯õC [ 424.136676][T13067] >Cã>Æ&2%!ùÖÒîè|Ÿˆ¨£…+÷h ìŽèª8gG®Ã#?õMr>¤WÈÒf>Ëß<”áQ¡oû"›…`ñj>$¢`¯.-8×]ýC>ãÖ8' [ 424.192073][T13070] ceph: Unknown parameter 'Œ4.‚Š\£u¢»ìó%>ó ›ÑVcÙíbàÚ#¯õC [ 424.192073][T13070] >Cã>Æ&2%!ùÖÒîè|Ÿˆ¨£…+÷h ìŽèª8gG®Ã#?õMr>¤WÈÒf>Ëß<”áQ¡oû"›…`ñj>$¢`¯.-8×]ýC>ãÖ8' 01:14:49 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x4) [ 424.314079][T13073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:14:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0xa0020000, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x0) 01:14:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 01:14:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x74, 0x80041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='&'], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000000)=@usbdevfs_connect) 01:14:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000004) clock_getres(0x5, &(0x7f00000002c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREMOVE(r6, &(0x7f00000003c0)={0x7, 0x7b, 0x2}, 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141300, 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000010000000000000008410000001400180000000069623a6d6163767461703000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00002abd7000fcdbdf25010000000000000007411000001c001868315f6d61637674617000000063950fc967e1002ce308e55ffb6455126dad3795eff171a1eae27b25b140a6367dc11a7537dda41e3c3388e2cf6fcaf8b55e930de3cc51e62a1970b2fbaf268ea2df9fba880283b3885afea8b54ff70576f40b0f6ceef6392e577c17b8413aa3bd2422"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xec909503730eeda8) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x0) 01:14:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0xa0020000, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x0) 01:14:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 01:14:50 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x4) 01:14:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/186, 0xba, 0x0, 0x0, 0x0) 01:14:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 01:14:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x70, 0xa8, 0x2, 0x7, 0x81, 0x0, 0x1, 0x28400, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x22000, 0x9, 0x4, 0xa, 0x5, 0x3ff, 0x975}, r5, 0x1, r5, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4}}, 0x10) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) 01:14:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0xa0020000, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x0) 01:14:51 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x4) 01:14:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 01:14:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0xa0020000, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x0) 01:14:51 executing program 3: clock_getres(0x3, &(0x7f0000000040)) 01:14:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 01:14:51 executing program 3: clock_getres(0x3, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0xc2000) 01:14:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000040)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f8, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) 01:14:51 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x4) 01:14:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}}, 0x0) 01:14:51 executing program 3: clock_getres(0x5, &(0x7f00000002c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 01:14:51 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffbfc, 0x0, 0x1a, 0x0, 0x64}}) 01:14:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10021) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x1c01) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 426.621231][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.795572][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 01:14:52 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffbfc, 0x0, 0x1a, 0x0, 0x64}}) 01:14:52 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffbfc, 0x0, 0x1a, 0x0, 0x64}}) 01:14:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}}, 0x0) 01:14:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) [ 427.404246][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:53 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0xfffffbfc, 0x0, 0x1a, 0x0, 0x64}}) 01:14:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10021) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x1c01) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 01:14:53 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x46100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) setsockopt(r0, 0x7, 0x1f, &(0x7f00000000c0)="b92621b34f2c0111d45e5e9e334031a0ac34588a77386e1c3d4810ddd1e2c1abbe445c5b7ec606fd9765ba62d1ff11", 0x2f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40, 0x4, 0x11}, 0x18) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25010000000c00080003000000000000000c00030009000000000000000c00060002000000000000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="000000006738539aaeddd253b67e89dd8c13071ba93a7bb75256c8c1d8a0505a11253caba620663606935349ea13b2e949942e896bd0a0a2ebe37f1903d535b01fc6256a81d086a2f48d0a23d36535b6f5e15aa8d246b0c4b23a975ea87653c708144cd7c3f00df9654a483b18db3c48bbfcbabe191337de9df89f9ae84f6ec0389ded64e03d9d335bf7effbcec30445b6a1fe7270085544b5190aa34fbba961df05930249528a5527c300000000000000", @ANYRES32=r9, @ANYBLOB="4b000d0090ae2b432a7e2466129beb5175ad22b4a78a7dbb089beb57490926c9", @ANYRES32=r10, @ANYBLOB="0c000400ffffff7f000000000c000200d400000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101201, 0x0) dup2(r3, r11) 01:14:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}}, 0x0) 01:14:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) [ 428.030282][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:53 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0x5c}}, 0x0) 01:14:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x4, 0x5, 0x0, 0x217, 0xffffffffffffffff, 0x0, [], 0x0, r4}, 0xff6c) dup2(r0, r0) r6 = dup2(r1, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x1ff}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000027c0)={0x3}, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x420, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) r9 = dup2(r0, r8) connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r10, r11) 01:14:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}}, 0x0) 01:14:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 01:14:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10021) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x1c01) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 428.521993][T13192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:14:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) r1 = epoll_create(0x5) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0) 01:14:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="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", 0x156}], 0x1}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 01:14:54 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sched_getattr(0x0, 0x0, 0x0, 0x0) 01:14:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) r1 = epoll_create(0x5) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0) 01:14:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x565401, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 429.131945][T13214] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 01:14:54 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sched_getattr(0x0, 0x0, 0x0, 0x0) 01:14:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10021) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x1c01) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 01:14:54 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 429.365331][T13226] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 01:14:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) r1 = epoll_create(0x5) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0) 01:14:55 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sched_getattr(0x0, 0x0, 0x0, 0x0) [ 429.556190][T13231] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 01:14:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, 0xffffffffffffffff) [ 429.769602][T13240] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 01:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="1f000000000319000000010100ff3ffe580000000000000006eae688000000", 0x1f}], 0x1) 01:14:55 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) r1 = epoll_create(0x5) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}}}, 0x0) [ 430.049856][T13249] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:55 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 01:14:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffb, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) dup2(r7, r3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r10 = dup2(0xffffffffffffffff, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000100)) 01:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="1f000000000319000000010100ff3ffe580000000000000006eae688000000", 0x1f}], 0x1) [ 430.387592][T13253] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:55 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000018000100000000000000000002000000000000065c"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:14:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) [ 430.590931][T13260] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 01:14:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="1f000000000319000000010100ff3ffe580000000000000006eae688000000", 0x1f}], 0x1) [ 430.777931][T13274] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.815590][T13275] binder: 13271:13275 unknown command 0 [ 430.821385][T13275] binder: 13271:13275 ioctl c0306201 20000200 returned -22 01:14:56 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000018000100000000000000000002000000000000065c"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 430.876984][T13277] binder: 13271:13277 ioctl c018620c 200000c0 returned -22 01:14:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f00000000c0)={0xffff7b42, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000200)=0x4) dup2(r6, r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0xd}, 0x40) r11 = dup2(r9, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_EDID(r11, 0xc0285629, &(0x7f0000000280)={0x0, 0x3ff, 0x5, [], &(0x7f0000000240)=0xff}) 01:14:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="1f000000000319000000010100ff3ffe580000000000000006eae688000000", 0x1f}], 0x1) [ 431.069959][T13281] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.159366][T13284] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 01:14:56 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000018000100000000000000000002000000000000065c"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:14:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) [ 431.448872][T13288] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 01:14:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) [ 431.543826][T13277] binder: BINDER_SET_CONTEXT_MGR already set [ 431.550006][T13277] binder: 13271:13277 ioctl 40046207 0 returned -16 [ 431.601599][T13290] binder: 13271:13290 unknown command 0 [ 431.602590][T13291] binder: 13271:13291 ioctl c018620c 200000c0 returned -1 [ 431.607431][T13290] binder: 13271:13290 ioctl c0306201 20000200 returned -22 01:14:57 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 01:14:57 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000018000100000000000000000002000000000000065c"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:14:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) 01:14:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) [ 432.213108][T13317] binder: 13314:13317 unknown command 0 [ 432.219107][T13317] binder: 13314:13317 ioctl c0306201 20000200 returned -22 [ 432.277215][T13319] binder: 13314:13319 ioctl c018620c 200000c0 returned -22 01:14:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) 01:14:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) [ 432.508265][T13323] binder: 13320:13323 unknown command 0 [ 432.514619][T13323] binder: 13320:13323 ioctl c0306201 20000200 returned -22 [ 432.563069][T13324] binder: 13320:13324 ioctl c018620c 200000c0 returned -22 01:14:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x4, {0xe59b, 0x8, "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", 0x0, 0x2, 0x80, 0x1, 0xba, 0x7, 0x20}}}, 0x128) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRESDEC, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x26040010}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="a570914fe67462c96f7bfd4197b433304a540c933b6b629d5a26ceed72554cd139d724aeddf589c850a685247371a78ae72f0654b57454af969c3dc4e2a3f0b4b0ea5a2752d1053a56ea0bfa2b18ffd5f60f039e5c4b552fb3b24768a39bb735b875bca3cf4d6f39b9199020c452b8e93d0bfc79b6121b474abac6d0"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES64=0x0, @ANYRESHEX], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MTU={0x8, 0x3, 0xd24}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0xf20, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004044}, 0x40815) dup2(r3, r4) 01:14:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e11", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 01:14:58 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') [ 433.032831][T13333] __nla_validate_parse: 1 callbacks suppressed [ 433.032861][T13333] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:14:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) 01:14:58 executing program 1: eventfd2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 01:14:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) [ 433.501974][T13341] binder: 13338:13341 unknown command 0 [ 433.508033][T13341] binder: 13338:13341 ioctl c0306201 20000200 returned -22 [ 433.556739][T13344] binder: 13338:13344 ioctl c018620c 200000c0 returned -22 01:14:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffc, [], 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x40) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="49359eca", @ANYRES16=r10, @ANYBLOB="000825bd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00ff0000000600110001800000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000600000006001100ff0f0000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000008000006001100000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00090000000600110008000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r11) [ 433.630846][T13346] binder: 13343:13346 unknown command 0 [ 433.636841][T13346] binder: 13343:13346 ioctl c0306201 20000200 returned -22 [ 433.696276][T13348] binder: 13343:13348 ioctl c018620c 200000c0 returned -22 01:14:59 executing program 1: eventfd2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 01:14:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) unshare(0x4000400) r4 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r4, 0x2000000080045700, &(0x7f0000000000)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r5) 01:14:59 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 01:14:59 executing program 1: eventfd2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 01:14:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) 01:14:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f00000000c0)={0x82, 0x10001, 0x8}) rt_sigreturn() 01:15:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3}) [ 434.628064][T13369] binder: 13366:13369 unknown command 0 [ 434.634189][T13369] binder: 13366:13369 ioctl c0306201 20000200 returned -22 [ 434.694971][T13372] binder: 13366:13372 ioctl c018620c 200000c0 returned -22 [ 434.798336][T13374] binder: 13370:13374 unknown command 0 [ 434.804346][T13374] binder: 13370:13374 ioctl c0306201 20000200 returned -22 01:15:00 executing program 1: eventfd2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x69c4}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1fb}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) [ 434.851013][T13375] binder: 13370:13375 ioctl c018620c 200000c0 returned -22 01:15:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000400)={{0xa, 0x4e24, 0x8000, @private2, 0x400}, {0xa, 0x4e22, 0xfffffff5, @private0={0xfc, 0x0, [], 0x1}, 0x20000000}, 0x0, [0x5, 0x4, 0x1, 0x20, 0x5, 0x3, 0x8, 0x7fff]}, 0x5c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) r5 = dup2(r3, r4) r6 = openat2(r5, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0xea, 0x14}, 0x18) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000010601010000000000000000200000010500018bfa973b8585f4d400070000000500010007000000ec5de71d663a43b57fd0c14d285ce4cf7033d098af9e871d77665aefb765659ab4a0cd0732a72ed9c2f06d8d07006b09f0aea28cae579d605287bdf5a6d3322cca829d324d8930f593c18f5b0041ffc0d962ecc88e364f1fa3db2f68133ddfa740dde9f141996c5f5b8f531f340376bdd6d3d84700e9ffffff00"/180], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x40) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={r11}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r11, 0x9, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000200)={0x6, 0x5, 0x800f, 0x20000, 0x400, 0x1, 0x200, 0x8, r11}, 0x20) 01:15:00 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x2, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) 01:15:00 executing program 1: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 01:15:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x541c, &(0x7f00000000c0)) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r6, r10) 01:15:00 executing program 1: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 01:15:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000011c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001ac0)) 01:15:01 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) link(&(0x7f0000000400)='./file0/bus\x00', &(0x7f0000000440)='./file0/file0\x00') 01:15:01 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x2, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) 01:15:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0x10004, 0x4, 0xd}, 0x40) r2 = dup2(r0, r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) renameat(r3, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) 01:15:01 executing program 1: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 01:15:01 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x2, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) 01:15:01 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) link(&(0x7f0000000400)='./file0/bus\x00', &(0x7f0000000440)='./file0/file0\x00') 01:15:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000011c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001ac0)) 01:15:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x0, 0xd}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r4) 01:15:01 executing program 1: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x1}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 01:15:01 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x2, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) 01:15:01 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) link(&(0x7f0000000400)='./file0/bus\x00', &(0x7f0000000440)='./file0/file0\x00') 01:15:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000011c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001ac0)) 01:15:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x1000000d, 0x605, 0xffffffffffffffff, 0x100}, 0x40) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r3, &(0x7f00000000c0)=0xfffffffffffff6db, 0x7fff) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r4, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, 0x0, &(0x7f00000000c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r10 = dup2(r7, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) recvfrom$l2tp6(r10, &(0x7f0000000100)=""/84, 0x54, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x40) dup2(r6, r11) 01:15:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xb6, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "9caa8d7bfdda901d2a13818e000000000000008000"}) 01:15:02 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) [ 436.772805][T13432] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 01:15:02 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) link(&(0x7f0000000400)='./file0/bus\x00', &(0x7f0000000440)='./file0/file0\x00') 01:15:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000000c0)={0x8001, 0x3, 0x3, 0x0, 0x0, [{{r4}, 0x1}, {{r5}, 0x3a}, {{r6}, 0x4}]}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r7, r8) 01:15:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000011c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001ac0)) 01:15:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xb6, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "9caa8d7bfdda901d2a13818e000000000000008000"}) 01:15:02 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) 01:15:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000933900000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 01:15:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xb6, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "9caa8d7bfdda901d2a13818e000000000000008000"}) [ 437.621848][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:15:03 executing program 5: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000180)=0x75) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x3}, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffb, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6beabc81e1520000000000000001000fff6129edb9820000000000000d403f7ff633b27e526560000000059d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f02cc3c1a6ed7360627ec60cb274e08da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc71d61c2b3c65f2f80a61ea6e457ebc93982e20e03b86d4e999bbb53a930ee0ce30e00600cff8ca1496e518e3e6fcfffffffffffffffeb82ee2469fb31bdbb2769d25f196ab6f2d1b94d878d0d9c2a5c74633a687a135308e49ce118c92517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000000000000000009a583b79ab01f70d85463c57c5bb1f1084e683b591fc2ca01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827db6db0f9a9eed23ede6634bf57fbe0080d1588bb30abcbfecb4e10d4097a01000000000000000beb233b754ca3b886b8a4c080f2ea4b1fcd8dd58b946c469fb7001340d06a04c9b039bec54854693563080e683a28fc32d6aafe2847078f1d32fdceff9ea5d428ee5b65129f7e6a9f739d8a20c7ed1a0f192bac54dace78644b5949ff010000000000008938ed0393ced6d6f81f5e3f2e551aeb9cdfe38f7e3dab378ddaffaa5670d78a345fe99e59de26086a3b29d047a032d35ddf8b90283a83cab92e06000000eb327c428c3222c3bacb0a2c2651d47fa7e72d54e7867558e7d80fdf6668c5584edf74c374296322a867da5b6819a63269bbecc42ffd5954890c2c4550cb11ec7e0e17c89c00000000000000002a7869e7ed24f05d475ed924c9f4e26f947f8639c5c8ed64e447014882b7bca7ab8ca9fdcba1da30765f5c55164caf015c334a4af852c28a6ecd78c20eae30c207b32c15dc3effbd547480b1510099de4e052a18496cdfc76fd205f201f2d964f5f9fe18d46cb789d7c52f5c0de5311749ef56244f7c3f11235c9df18f62980babe1583e4b887e71fa7a3780d99f34eae615995609ef08dc05e38f63c693ac0cc6ddd1336d55c1576d5e6700e62d696bf817af863936a650f9f3c8732793bdb2802c1461babf6720b6c551d2ace1929b6880d6e095da065d01b59bc71bb149fd7555cfe486aaa96a8040c5a9c4cae2c6edfd7013488c2056fb83119f81828f4ece4dafb2404c4aadca5c7c3b8bda7852f0a83156ef22705082cff411c6eb602b8228ba2f022183b693db6dfbf2ef2e5afc01273edf88047c1f5162e4c281b33b8f57750595b8e50dcf44653110485eabc8b4510469da226539c645a7dcd73b0657ab58002ca2e78c672f80266668cc658bda1996ca1b6ecaeec2ca16e846172f5536134b447ccc685fde720afd531ca19778d5d247c17a0156782e78086f00000000000000000000416d660300dcb9f36f9c4c4d2729548d1c87f50c9120703a325d80d709e8290ef40421a3191aa70118a6f8351f8050f6f0bdc8fadb48cbb85204bc360186b24b6129a7069fdc2bc157aaac28454eba3b901346900e8b70f47a16896ad3cfc898af4ac7850854d8852965e91c605abc5c8f47aaae50de5f395857128cfff055495f1d328e81f05dac7ac9acecbfffc13ed5c9225b02caee90013d38aa02ae922a218712ad8604bdc44c404f5ab2a7de54cee4d732b3fc9f150d85b97d42284d39a20eec93703d33f1be1aa49a9add5183095014db702f97164862e3c4fdf8662f430159201ea111123d104a64b9af163f80a9710000eb57b85825996a06c64fac6fdb2a40eff38d90389e1b04cd9328ab5361bd4b9a581aef1ca658d1f75078f2a70970860884c50ee0e4824a5025a269c0291523b6b6e0b85b029799f9e3f0ffc6fae150ad8c31689bf18753c7a281814d44f372a12f2c7f3add93992c57153fa1fdf848640ddf7e4f1238b7ac82fd39c72f450d55b67955642cc23cf70fe0f8b191d28eb9343cf5eddc32e0c2b15b4d72ed0215a1297fd7"], 0x2fe) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x80000001, 0x1, 0x3, 0x7, &(0x7f0000000000)=[{0x3ff, 0x48e4, 0xfffd, 0x7}, {0x3, 0x3, 0x8, 0xfffc}, {0x8, 0x4, 0x4382, 0x401}, {0x5d5, 0x1ff, 0x6, 0x9}, {0x1, 0x5a68, 0x6, 0x3}, {0xff, 0x8, 0x94, 0x9}, {0x20, 0x0, 0x8000, 0x6}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1c8c83, 0x0) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000580)=0x9, 0x4) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 01:15:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x0, 0xa8, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) r5 = dup2(r3, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x9, 0x7}, {0x200, 0x6}, {0x8000, 0x4}]}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={0x0, 0x85, 0x7a}, &(0x7f0000000480)=ANY=[@ANYBLOB="656e633d5f61657020686173683d7069c48cd93330352d61726df7000000000000fdffffffffffffff000000000000000000000000000000010400000000000000009600000c0020000000000000bc525402c83ab9e8ee38024ca5082a6c85f0b08fd935f66f6ac570210c63acd037cc76c0a93a8c034f0649d4fbf2c01b977778eaf8b07f35d7d47c4046cbfd8685"], &(0x7f0000000300)="49cb04705f9d6d16336261c694163f4ff0c88089865cca54facf5011eb20ba438c3d5bab73ebc9639564d8bc5e451ba1af8b820d1439135fb192c43a9e7ff0acc930618215d3b742b9f4cdc1d4ba7940ef9b5853f032024cbe048e88680556c3552e0da94bfc914095e82f3da5be960dbc9a8c6649a16de064c5fc63fd16dae27ca5744d9f", &(0x7f00000003c0)=""/122) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000440)) dup2(0xffffffffffffffff, r3) [ 437.780536][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.818423][ C0] sd 0:0:1:0: [sg0] tag#1714 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 437.829122][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB: Test Unit Ready [ 437.836058][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.845880][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.855708][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.865567][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.875409][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.885244][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.895056][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.904880][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.914720][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01:15:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat2(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x402002, 0x1f1, 0x8}, 0x18) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"9437950bd8f02c9db2bf901b12c83e137689543a56869fe5fedecb221f96e4b26acc98bff46b5660ae7aea69fc5db410e2f7f44a44e735d62495a2e931be392b69a89da6d9a8c97329f41cc7070870312abd0e8a33133906158014e3c5e59741a8f83cd029d10d0127b18edb76fa63a2a2741016c331717c8202e62cc44198cffde1e04e163b4444601ff000a2aa09e8942d2c6e5e8bf96a70f58efa0a8e6b2774f30e115bb9bbe586c0e9bac6982db5b5084d9da5a9815eec9cb35efb8b4f3a728669b7d95434505774390c3fa15ee02d646081271c2e06df74bf88150801914dba39f70224cfedf43858d890c9c5e902a6c8e0565fa93dcbb8d46debd98bc7a842a06d844f38d6d8dac8bdb6b3790c37faf6ccaaae812ee7e55d22fc1b03a27c3d8891222b6fda90cbeae6b4f2c206500b0838105f395b8e8e57db670195013b30aea4986c3b80aa04e8ef45bf8658a8d360a44e4e1768bca38f22f30b89a2828767a3ced19f55951bd2ee10d997de8886de0fd1bb36fb0570f05f3a117e54f0596b1513553b601b358f36d1b0497207bd55dd738679bcb3c6f9737143a789a5ad2a82adc61f135b41c9d185909199cc593da41fa0c73647472bc0e169665c72138a9e9c2e2e2249cba9f26a91b3764f4a1a0a34c6c579b44cc2715642d71f3e09ad257e7846629f7188efd6ffc09d0cef818fa83e481dfcc99c5ce506f2bd8e1098fee075b4b4935a19e365126fda6be4346cc2a5e0d2cf652411110e26a0b2446f5eaa2b4e9748939fe3ef211cdd40d5bc2a9482258c0a3258caf20372dbfa8553f6aa11e82b37a308d545391c87c83eb8f8edddb3339074970f7cf4e01b903edf39957aebc9284dbfa1eb311eff2bd6c2bd2a6db69e33613df285f48b02aa2045d27a281be476f0daedbcef22604ce4a4b0fd492b5ff5bd1ec1f50adbb21ba4642f853df9a3b0d08d007be174d247b3385d95e7cd349370248fb61dd23991082a67762ca2eee8d623a1bb440c08d182294dd00eabb12530f86e340261b05730983045780a2599a44c651c602b6c4d6a780bb178e2b6582e6c927e422735911b00dd496423cedde68463f412bca7c5dcae3ea761d4a15146b8156fb44de160d49b0ec0f6f53747097263b26fee530513c5977ad8322e0b071cb4ecf0b26a977acdbe4e64701ac5620be993b8ec7482c366a955544fb3e30b11f4aed001c4c969ab3d4826b48c0d59324ec2f6011716870a89e816a8d2af856fbcbdeed49b3db368e4e9994847691d47f2e448fbdc0db3595632b483a973cecc41ee52f15d90fb893d1c38c9d663ddad64807c6384867c49b37e9ca6b5473ff3810b0584f659ae57062e353c634f665f35684efb5abf6f17fc22ac28a75fd8365eb33999fc623c983da20b6fc6e6b466ca1e7e75686dad0d0cb6bf35beeb9218bea8c4ead1"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0xd2}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x70, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='wg0\x00', 0x33, 0xffff, 0x6}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000140)={0x400, [0x5, 0x4b7, 0x0, 0x180, 0x2, 0x2, 0x400, 0x1, 0x42e3, 0x6f5, 0x8, 0x2, 0x0, 0xfe00, 0x612, 0x8d0d, 0x1995, 0xffe0, 0x5, 0x7, 0xfff7, 0x1, 0x9848, 0x5, 0x1ff, 0xff, 0x9, 0xf000, 0x401, 0x2, 0x1ff, 0x1, 0x2, 0x4, 0x5, 0x3, 0x0, 0x7, 0x2b, 0xffc0, 0x8, 0x3e, 0x7, 0x3, 0x7, 0x1000, 0x7, 0x45af], 0x6}) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x0) clock_getres(0x5, &(0x7f00000002c0)) [ 437.924552][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.934387][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.944220][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 437.954041][ C0] sd 0:0:1:0: [sg0] tag#1714 CDB[c0]: 00 00 00 00 00 00 00 00 [ 438.166352][T13491] IPVS: ftp: loaded support on port[0] = 21 01:15:03 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) 01:15:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xb6, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, "9caa8d7bfdda901d2a13818e000000000000008000"}) 01:15:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000933900000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 438.734856][T13492] IPVS: ftp: loaded support on port[0] = 21 01:15:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028006000f00050000000800150093000600060018008ba8000008000500", @ANYRES32=r9, @ANYBLOB="88dbccf984836b16afa56e990ea8876276bcca3006dfd29b95b1d3778d686c47f9fd"], 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r9, 0x2f, 0xf7, 0x9, 0x2, 0x31, @private2, @mcast1, 0x7800, 0x7, 0x1, 0x7fff}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000200)=r10) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0) dup2(r3, r11) 01:15:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0x4, 0x4}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x220000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0xd6, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000080)=""/214}, &(0x7f0000000200)=0x78) clock_getres(0x5, &(0x7f00000002c0)) 01:15:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') read$FUSE(r0, &(0x7f0000001140), 0x1000) read$usbfs(r0, 0x0, 0x0) 01:15:04 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) [ 439.188093][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.358602][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.511885][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:15:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x120, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xf0}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)) clock_getres(0x5, &(0x7f00000002c0)) 01:15:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000933900000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 439.851147][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.003881][ T7] tipc: TX() has been purged, node left! 01:15:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08020300ecff3f00e1ff0200000a0200000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 01:15:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x54}, 0x1, 0xf5ffffff}, 0x0) 01:15:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') read$FUSE(r0, &(0x7f0000001140), 0x1000) read$usbfs(r0, 0x0, 0x0) 01:15:06 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x32, 0x0, "3eb42f3ce0997a8f57be349e6bf78a56f148aa0d43a098000c43fb299747120bdeb2ebd2b44ee70e39d42440fb5e675f126d2e0b95e628b0fe561dc94a70be04c42f01401bf4167eecd22ebfc08c30eb"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784003000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 01:15:06 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) clock_getres(0x5, &(0x7f00000002c0)) 01:15:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000933900000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 441.260409][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:15:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x54}, 0x1, 0xf5ffffff}, 0x0) 01:15:06 executing program 3: clock_getres(0x5, &(0x7f0000000000)) 01:15:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08020300ecff3f00e1ff0200000a0200000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 01:15:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') read$FUSE(r0, &(0x7f0000001140), 0x1000) read$usbfs(r0, 0x0, 0x0) 01:15:07 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x32, 0x0, "3eb42f3ce0997a8f57be349e6bf78a56f148aa0d43a098000c43fb299747120bdeb2ebd2b44ee70e39d42440fb5e675f126d2e0b95e628b0fe561dc94a70be04c42f01401bf4167eecd22ebfc08c30eb"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784003000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 01:15:07 executing program 2: unshare(0x20600) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)) 01:15:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x54}, 0x1, 0xf5ffffff}, 0x0) 01:15:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x10) clock_getres(0x5, &(0x7f00000002c0)) 01:15:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08020300ecff3f00e1ff0200000a0200000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 01:15:07 executing program 2: unshare(0x20600) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)) 01:15:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x54}, 0x1, 0xf5ffffff}, 0x0) 01:15:07 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x32, 0x0, "3eb42f3ce0997a8f57be349e6bf78a56f148aa0d43a098000c43fb299747120bdeb2ebd2b44ee70e39d42440fb5e675f126d2e0b95e628b0fe561dc94a70be04c42f01401bf4167eecd22ebfc08c30eb"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784003000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 01:15:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') read$FUSE(r0, &(0x7f0000001140), 0x1000) read$usbfs(r0, 0x0, 0x0) 01:15:07 executing program 3: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3f, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) clock_getres(0x5, &(0x7f0000000000)) 01:15:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08020300ecff3f00e1ff0200000a0200000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 01:15:08 executing program 2: unshare(0x20600) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)) 01:15:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) 01:15:08 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') clock_getres(0x5, &(0x7f00000002c0)) 01:15:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0185502, &(0x7f0000000040)=@usbdevfs_connect) 01:15:08 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x32, 0x0, "3eb42f3ce0997a8f57be349e6bf78a56f148aa0d43a098000c43fb299747120bdeb2ebd2b44ee70e39d42440fb5e675f126d2e0b95e628b0fe561dc94a70be04c42f01401bf4167eecd22ebfc08c30eb"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784003000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 443.011470][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:15:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x11, r1, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2201, &(0x7f0000000100)) 01:15:08 executing program 2: unshare(0x20600) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)) [ 443.159540][T13668] ===================================================== [ 443.166519][T13668] BUG: KMSAN: uninit-value in bpf_skb_get_nlattr+0x145/0x290 [ 443.166536][T13668] CPU: 1 PID: 13668 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 443.166544][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.166549][T13668] Call Trace: [ 443.166572][T13668] dump_stack+0x1df/0x240 [ 443.166595][T13668] kmsan_report+0xf7/0x1e0 [ 443.166613][T13668] __msan_warning+0x58/0xa0 [ 443.166631][T13668] bpf_skb_get_nlattr+0x145/0x290 [ 443.166654][T13668] ___bpf_prog_run+0x214d/0x97a0 [ 443.166695][T13668] ? __tcp_push_pending_frames+0x124/0x4e0 [ 443.182732][T13668] ? tcp_send_fin+0x131e/0x1570 [ 443.196057][T13668] ? bpf_skb_get_pay_offset+0x60/0x60 [ 443.204772][T13668] __bpf_prog_run32+0x101/0x170 [ 443.214266][T13668] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 443.224985][T13668] ? kmsan_get_metadata+0x4f/0x180 [ 443.235173][T13668] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.246144][T13668] ? ___bpf_prog_run+0x97a0/0x97a0 [ 443.257026][T13668] packet_rcv+0x70f/0x2150 [ 443.266519][T13668] ? packet_sock_destruct+0x1e0/0x1e0 [ 443.271901][T13668] dev_queue_xmit_nit+0x11a0/0x1280 [ 443.277313][T13668] dev_hard_start_xmit+0x20c/0xa70 [ 443.282441][T13668] __dev_queue_xmit+0x2f8d/0x3b20 [ 443.287469][T13668] ? nfnetlink_has_listeners+0x7d/0xa0 [ 443.292949][T13668] dev_queue_xmit+0x4b/0x60 [ 443.297456][T13668] ip6_finish_output2+0x2057/0x2620 [ 443.302679][T13668] ? kmsan_get_metadata+0x11d/0x180 [ 443.307883][T13668] __ip6_finish_output+0x824/0x8e0 [ 443.312998][T13668] ip6_finish_output+0x166/0x410 [ 443.317926][T13668] ip6_output+0x60a/0x770 [ 443.322248][T13668] ? ip6_output+0x770/0x770 [ 443.326745][T13668] ? ac6_seq_show+0x200/0x200 [ 443.331401][T13668] ip6_xmit+0x1f67/0x2710 [ 443.335728][T13668] ? ip6_xmit+0x2710/0x2710 [ 443.340305][T13668] inet6_csk_xmit+0x42b/0x570 [ 443.344984][T13668] ? inet6_csk_addr2sockaddr+0x2c0/0x2c0 [ 443.350602][T13668] __tcp_transmit_skb+0x440e/0x6090 [ 443.355808][T13668] tcp_write_xmit+0x30b1/0xb430 [ 443.360684][T13668] __tcp_push_pending_frames+0x124/0x4e0 [ 443.366307][T13668] tcp_send_fin+0x131e/0x1570 [ 443.371410][T13668] tcp_close+0x10f8/0x18b0 [ 443.375809][T13668] ? ip_mc_drop_socket+0x692/0x6d0 [ 443.380915][T13668] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.386796][T13668] ? tcp_check_oom+0x530/0x530 [ 443.391551][T13668] inet_release+0x1f7/0x270 [ 443.396043][T13668] inet6_release+0xaf/0x100 [ 443.400539][T13668] sock_close+0x156/0x460 [ 443.405227][T13668] ? __inet6_bind+0x1d00/0x1d00 [ 443.410094][T13668] ? sock_mmap+0x130/0x130 [ 443.414494][T13668] __fput+0x4ae/0xb80 [ 443.418901][T13668] ____fput+0x37/0x40 [ 443.422894][T13668] ? fput_many+0x2a0/0x2a0 [ 443.427306][T13668] task_work_run+0x1ee/0x2d0 [ 443.431894][T13668] __prepare_exit_to_usermode+0x422/0x4d0 [ 443.437602][T13668] __syscall_return_slowpath+0x89/0x5b0 [ 443.443158][T13668] ? kmsan_get_metadata+0x4f/0x180 [ 443.448294][T13668] do_syscall_64+0xd6/0x150 [ 443.452873][T13668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 443.458756][T13668] RIP: 0033:0x415d51 [ 443.462626][T13668] Code: Bad RIP value. [ 443.466673][T13668] RSP: 002b:0000000000c9fbe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 443.475417][T13668] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000415d51 [ 443.483369][T13668] RDX: 0000000000000000 RSI: 0000000000000065 RDI: 0000000000000003 [ 443.491863][T13668] RBP: 0000000000000001 R08: 000000003314e065 R09: 000000003314e069 [ 443.500453][T13668] R10: 0000000000c9fcd0 R11: 0000000000000293 R12: 000000000078c900 [ 443.508411][T13668] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 443.516372][T13668] [ 443.518682][T13668] Uninit was stored to memory at: [ 443.524388][T13668] kmsan_internal_chain_origin+0xad/0x130 [ 443.530094][T13668] __msan_chain_origin+0x50/0x90 [ 443.535016][T13668] ___bpf_prog_run+0x6cbe/0x97a0 [ 443.539935][T13668] __bpf_prog_run32+0x101/0x170 [ 443.544770][T13668] packet_rcv+0x70f/0x2150 [ 443.549172][T13668] dev_queue_xmit_nit+0x11a0/0x1280 [ 443.554355][T13668] dev_hard_start_xmit+0x20c/0xa70 [ 443.559449][T13668] __dev_queue_xmit+0x2f8d/0x3b20 [ 443.564456][T13668] dev_queue_xmit+0x4b/0x60 [ 443.568942][T13668] ip6_finish_output2+0x2057/0x2620 [ 443.574124][T13668] __ip6_finish_output+0x824/0x8e0 [ 443.579217][T13668] ip6_finish_output+0x166/0x410 [ 443.585093][T13668] ip6_output+0x60a/0x770 [ 443.589421][T13668] ip6_xmit+0x1f67/0x2710 [ 443.593736][T13668] inet6_csk_xmit+0x42b/0x570 [ 443.598394][T13668] __tcp_transmit_skb+0x440e/0x6090 [ 443.603576][T13668] tcp_write_xmit+0x30b1/0xb430 [ 443.608412][T13668] __tcp_push_pending_frames+0x124/0x4e0 [ 443.614052][T13668] tcp_send_fin+0x131e/0x1570 [ 443.618715][T13668] tcp_close+0x10f8/0x18b0 [ 443.623119][T13668] inet_release+0x1f7/0x270 [ 443.627603][T13668] inet6_release+0xaf/0x100 [ 443.632091][T13668] sock_close+0x156/0x460 [ 443.636408][T13668] __fput+0x4ae/0xb80 [ 443.640373][T13668] ____fput+0x37/0x40 [ 443.644379][T13668] task_work_run+0x1ee/0x2d0 [ 443.648953][T13668] __prepare_exit_to_usermode+0x422/0x4d0 [ 443.655437][T13668] __syscall_return_slowpath+0x89/0x5b0 [ 443.660968][T13668] do_syscall_64+0xd6/0x150 [ 443.665456][T13668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 443.672827][T13668] [ 443.675162][T13668] Uninit was stored to memory at: [ 443.680431][T13668] kmsan_internal_chain_origin+0xad/0x130 [ 443.686133][T13668] __msan_chain_origin+0x50/0x90 [ 443.691069][T13668] ___bpf_prog_run+0x6c64/0x97a0 [ 443.695989][T13668] __bpf_prog_run32+0x101/0x170 [ 443.700824][T13668] packet_rcv+0x70f/0x2150 [ 443.705224][T13668] dev_queue_xmit_nit+0x11a0/0x1280 [ 443.710407][T13668] dev_hard_start_xmit+0x20c/0xa70 [ 443.715503][T13668] __dev_queue_xmit+0x2f8d/0x3b20 [ 443.720512][T13668] dev_queue_xmit+0x4b/0x60 [ 443.724999][T13668] ip6_finish_output2+0x2057/0x2620 [ 443.730192][T13668] __ip6_finish_output+0x824/0x8e0 [ 443.736071][T13668] ip6_finish_output+0x166/0x410 [ 443.740991][T13668] ip6_output+0x60a/0x770 [ 443.745303][T13668] ip6_xmit+0x1f67/0x2710 [ 443.749627][T13668] inet6_csk_xmit+0x42b/0x570 [ 443.754288][T13668] __tcp_transmit_skb+0x440e/0x6090 [ 443.759729][T13668] tcp_write_xmit+0x30b1/0xb430 [ 443.764564][T13668] __tcp_push_pending_frames+0x124/0x4e0 [ 443.779511][T13668] tcp_send_fin+0x131e/0x1570 [ 443.784179][T13668] tcp_close+0x10f8/0x18b0 [ 443.788588][T13668] inet_release+0x1f7/0x270 [ 443.793099][T13668] inet6_release+0xaf/0x100 [ 443.797693][T13668] sock_close+0x156/0x460 [ 443.802014][T13668] __fput+0x4ae/0xb80 [ 443.806105][T13668] ____fput+0x37/0x40 [ 443.810088][T13668] task_work_run+0x1ee/0x2d0 [ 443.814664][T13668] __prepare_exit_to_usermode+0x422/0x4d0 [ 443.820366][T13668] __syscall_return_slowpath+0x89/0x5b0 [ 443.825896][T13668] do_syscall_64+0xd6/0x150 [ 443.830385][T13668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 443.836338][T13668] [ 443.838649][T13668] Local variable ----regs@__bpf_prog_run32 created at: [ 443.845478][T13668] __bpf_prog_run32+0x87/0x170 [ 443.850225][T13668] __bpf_prog_run32+0x87/0x170 [ 443.854980][T13668] ===================================================== [ 443.861891][T13668] Disabling lock debugging due to kernel taint [ 443.868024][T13668] Kernel panic - not syncing: panic_on_warn set ... [ 443.874598][T13668] CPU: 1 PID: 13668 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 443.886211][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.896253][T13668] Call Trace: [ 443.899538][T13668] dump_stack+0x1df/0x240 [ 443.903946][T13668] panic+0x3d5/0xc3e [ 443.907855][T13668] kmsan_report+0x1df/0x1e0 [ 443.919121][T13668] __msan_warning+0x58/0xa0 [ 443.923612][T13668] bpf_skb_get_nlattr+0x145/0x290 [ 443.928978][T13668] ___bpf_prog_run+0x214d/0x97a0 [ 443.933903][T13668] ? __tcp_push_pending_frames+0x124/0x4e0 [ 443.939716][T13668] ? tcp_send_fin+0x131e/0x1570 [ 443.944561][T13668] ? bpf_skb_get_pay_offset+0x60/0x60 [ 443.949932][T13668] __bpf_prog_run32+0x101/0x170 [ 443.954780][T13668] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 443.960933][T13668] ? kmsan_get_metadata+0x4f/0x180 [ 443.966038][T13668] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.971926][T13668] ? ___bpf_prog_run+0x97a0/0x97a0 [ 443.977028][T13668] packet_rcv+0x70f/0x2150 [ 443.981453][T13668] ? packet_sock_destruct+0x1e0/0x1e0 [ 443.986814][T13668] dev_queue_xmit_nit+0x11a0/0x1280 [ 443.992024][T13668] dev_hard_start_xmit+0x20c/0xa70 [ 443.997135][T13668] __dev_queue_xmit+0x2f8d/0x3b20 [ 444.002251][T13668] ? nfnetlink_has_listeners+0x7d/0xa0 [ 444.007713][T13668] dev_queue_xmit+0x4b/0x60 [ 444.012208][T13668] ip6_finish_output2+0x2057/0x2620 [ 444.017406][T13668] ? kmsan_get_metadata+0x11d/0x180 [ 444.022610][T13668] __ip6_finish_output+0x824/0x8e0 [ 444.027730][T13668] ip6_finish_output+0x166/0x410 [ 444.032666][T13668] ip6_output+0x60a/0x770 [ 444.037004][T13668] ? ip6_output+0x770/0x770 [ 444.041498][T13668] ? ac6_seq_show+0x200/0x200 [ 444.046167][T13668] ip6_xmit+0x1f67/0x2710 [ 444.050769][T13668] ? ip6_xmit+0x2710/0x2710 [ 444.055710][T13668] inet6_csk_xmit+0x42b/0x570 [ 444.061354][T13668] ? inet6_csk_addr2sockaddr+0x2c0/0x2c0 [ 444.067509][T13668] __tcp_transmit_skb+0x440e/0x6090 [ 444.073242][T13668] tcp_write_xmit+0x30b1/0xb430 [ 444.078212][T13668] __tcp_push_pending_frames+0x124/0x4e0 [ 444.083845][T13668] tcp_send_fin+0x131e/0x1570 [ 444.088514][T13668] tcp_close+0x10f8/0x18b0 [ 444.092917][T13668] ? ip_mc_drop_socket+0x692/0x6d0 [ 444.098018][T13668] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 444.103809][T13668] ? tcp_check_oom+0x530/0x530 [ 444.108571][T13668] inet_release+0x1f7/0x270 [ 444.113064][T13668] inet6_release+0xaf/0x100 [ 444.117559][T13668] sock_close+0x156/0x460 [ 444.121875][T13668] ? __inet6_bind+0x1d00/0x1d00 [ 444.126724][T13668] ? sock_mmap+0x130/0x130 [ 444.131298][T13668] __fput+0x4ae/0xb80 [ 444.140928][T13668] ____fput+0x37/0x40 [ 444.144899][T13668] ? fput_many+0x2a0/0x2a0 [ 444.149329][T13668] task_work_run+0x1ee/0x2d0 [ 444.153912][T13668] __prepare_exit_to_usermode+0x422/0x4d0 [ 444.159708][T13668] __syscall_return_slowpath+0x89/0x5b0 [ 444.167420][T13668] ? kmsan_get_metadata+0x4f/0x180 [ 444.172520][T13668] do_syscall_64+0xd6/0x150 [ 444.177116][T13668] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.184293][T13668] RIP: 0033:0x415d51 [ 444.188165][T13668] Code: Bad RIP value. [ 444.192213][T13668] RSP: 002b:0000000000c9fbe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 444.200608][T13668] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000415d51 [ 444.208673][T13668] RDX: 0000000000000000 RSI: 0000000000000065 RDI: 0000000000000003 [ 444.216628][T13668] RBP: 0000000000000001 R08: 000000003314e065 R09: 000000003314e069 [ 444.225539][T13668] R10: 0000000000c9fcd0 R11: 0000000000000293 R12: 000000000078c900 [ 444.234449][T13668] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 444.243588][T13668] Kernel Offset: 0x1da00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 444.255903][T13668] Rebooting in 86400 seconds..