0, 0x1}, 0x3c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xab) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000de3000)={{0x0, 0xa}, {0x1f}}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x3, [0x0, 0x954, 0x1, 0x5, 0x800, 0x200, 0x0, 0xe06, 0x9, 0x844e, 0x7f, 0x9, 0x4, 0x0, 0x8000, 0x2, 0x4, 0x8, 0x3, 0x9aa, 0x7fff, 0x17, 0x7000, 0x1, 0x41c1, 0x9, 0x8, 0x22, 0x3, 0x8, 0x7, 0x3, 0x8, 0x3, 0xffff, 0xde, 0x8, 0x1000, 0x1ff, 0xfff7, 0xba2, 0x1, 0xa2e, 0x81, 0x3, 0x1, 0x9, 0x8], 0x7}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="b40500084fc5d63f61101800000000003e5a040000009a536f00009500000000000000f86454260487dc068de73ad80ae6fd21589574f8a932860777aec99b5fa6b5ffda21833a0400ab4f5490e39e0468c21b6506fbcc27bd"], &(0x7f0000000240)='syzkaller\x00', 0x40003, 0x27, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0xfffffffffffffcc1, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x10}, 0x78) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0xa}, {0x1f}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0xa}}) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) socket$inet6(0xa, 0x400000000001, 0x0) tee(0xffffffffffffffff, r3, 0x2, 0x3) [ 570.296907][ C0] sd 0:0:1:0: [sg0] tag#3654 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 570.307560][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB: Test Unit Ready [ 570.314303][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.324217][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.330546][T23417] IPVS: ftp: loaded support on port[0] = 21 [ 570.334023][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.334131][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.334247][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.369392][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.379284][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15:43:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) [ 570.389110][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.398919][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.408737][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.418538][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.428377][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.438216][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15:43:31 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x6, 0x40) close(r3) socket$inet(0x2, 0x4000000805, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 570.448040][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 570.457857][ C0] sd 0:0:1:0: [sg0] tag#3654 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 15:43:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128f0b00010067656e6576650000040002800a000100cef8c162ccc5906f"], 0x40}}, 0x0) 15:43:31 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:31 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 570.705075][T23433] x_tables: duplicate underflow at hook 2 15:43:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) unlink(&(0x7f0000000040)='./file0/file1\x00') r1 = open(&(0x7f0000000500)='./file0\x00', 0x200040, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000300)) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x2c0101, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) fsync(r2) ftruncate(r3, 0x0) accept4(r3, &(0x7f0000000140)=@tipc, &(0x7f00000000c0)=0x80, 0x0) r4 = socket$inet(0x2, 0xa, 0x3) setsockopt$inet_dccp_buf(r4, 0x21, 0xc0, &(0x7f0000000240)="c7612edf71ce79ffa1b1154ec068d584be7e19e0af06ee620a9ea442d7b23757480792a68d4908461af8ac972d4ea642cfbdd41aca4209248a90d249b9ed8b392d1304123928ce6d261a275aa5b1feedbb1d8fbb2ecbe29f23bd6761e23c67ec6387e9e7865e8ca3c83bbaab3da992e588abd9f6df4cff0e05fb1154b2217437", 0x80) dup3(r2, r0, 0x0) 15:43:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:32 executing program 5: syz_emit_ethernet(0x10eb, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ftruncate(0xffffffffffffffff, 0x5) 15:43:32 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x6, 0x40) close(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:32 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:32 executing program 0: unshare(0x0) syz_open_dev$media(0x0, 0xfffffffffffffffe, 0x400180) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x66c100, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000240)={0x8, 'bridge_slave_1\x00', {'caif0\x00'}, 0xf67e}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000480)={0x1, 0x0, {0x2, 0x2, 0x7, 0x5}}) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000140)={0x1, 0x9, &(0x7f0000000040)=[0x2, 0x0, 0x1dd9, 0x100, 0xffff, 0x3, 0x3, 0x2, 0x2], &(0x7f0000000080)=[0x9, 0x81, 0x6], &(0x7f0000000100)=[0x8001, 0x7]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='comm\x00') r4 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000000)={0x7, @output={0x0, 0x0, {0xf1}}}) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000080)='comm\x00') pipe(&(0x7f0000000080)) 15:43:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2840d1d2d2e8cb7e00000449e3200000e1ebc340"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)={0x5, 0xa, 0x4, 0x8, 0x8, {0x77359400}, {0x3, 0x2, 0xfe, 0x1f, 0x5, 0x1, "928d99b3"}, 0x2, 0x1, @planes=&(0x7f0000000000)={0x9, 0x9, @fd, 0x7}, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000340)={'nat\x00'}, &(0x7f0000000080)=0x78) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000005dda8443fddac0da00c473d96291916cc06b41bdfc95e1079a78770185c42315463529335b00000058aa1266f8fa92d90d25b0639b0e0849d4a786adc9d32f01bf6c88609755cd332782fb81cc068f0db3db49de23"], @ANYBLOB="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"], 0x4a0) 15:43:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:32 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000900010076657468000000000400020008000300c91e25de29b04b74231c3fce927ac1d17df92bbb725c938eade5cdd64c85e6ea52e994d419c9fc3a7cc3c80f0a049582017e34839d8f76105bd8210019073273e596cb31ff2b3fee10561c07a78164da04fe37d4f4bdbc50ef88e94aa19301259efd1a5da0232b0823e3aaa458db72444ee03404e0bb8f", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000080)='comm\x00') stat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010004000000000002000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040000000000000010000400000000002000050000000000"], 0x3c, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x900) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={r4, r5, r6}, 0xc) sendmmsg$alg(r3, &(0x7f00000000c0), 0x5a, 0x0) 15:43:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:32 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbd, 0x0, &(0x7f0000000000)) 15:43:33 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:33 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb44) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x3, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x248080, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000100)={0x0, 0x0, 0x8080, [], &(0x7f0000000080)=0x8}) fsetxattr(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="75febe7d76207365762e892e73797a03d29955e26c8e244b694a68f450b2d9fc0526bbcbf87349375747b47bd49736eebc3b908f82d401b634a778a10a39eeaa42fd11e583d7899615dadee7a43addb1eb83db40b1cd33c5"], 0x0, 0x0, 0x0) [ 572.262090][T12701] tipc: TX() has been purged, node left! 15:43:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$mice(&(0x7f0000001a40)='/dev/input/mice\x00', 0x0, 0x400100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000001a80)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x6}, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x6}, @in6={0xa, 0x4e24, 0x20, @remote, 0x6}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x7, @local, 0x6b}, @in={0x2, 0x4e22, @local}], 0x90) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x7, {0x9}}], 0x38}, 0x0) [ 572.367262][T23704] x_tables: duplicate underflow at hook 2 15:43:33 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 572.414397][T12701] tipc: TX() has been purged, node left! 15:43:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:33 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:33 executing program 5: r0 = socket(0xa, 0x802, 0x80000000088) r1 = socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x0, 0x3, 0x1}}, 0x14) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x8400, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x6}, &(0x7f0000000240)=0x8) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x86, 0x20000) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffe15, 0x0}}], 0x183, 0x0, 0x0) 15:43:33 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:34 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="09000000040605000000000300003200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:34 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:34 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 573.216849][T23839] x_tables: duplicate underflow at hook 2 15:43:34 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:34 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, 0x0, 0x0) 15:43:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv4_newrule={0x1c, 0x20, 0x200, 0x70bd25, 0x25dfdbff, {0x2, 0x927373616efd80d3, 0x14, 0x3, 0x0, 0x0, 0x0, 0x7, 0x9}}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0x1, 0x4, 0x3, 0x10, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000080)='syzkaller\x00', 0xffff, 0xdb, &(0x7f0000000280)=""/219, 0x41000, 0x3, [], r5, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x9, 0x2, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) io_setup(0x1000, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x1, 0x0, 0x0}, 0x3c) io_submit(r10, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 15:43:34 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x28}}, 0x0) stat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x6}, {0x2, 0x1, r6}, {0x2, 0x3}], {}, [], {0x10, 0x4}, {0x20, 0x5}}, 0x3c, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in=@multicast1, 0x4e21, 0xfff9, 0x4e20, 0x5, 0xa, 0x80, 0xa0, 0x32, r5, r6}, {0x7, 0x0, 0x5, 0x2, 0xfffffffffffffff9, 0x7ff, 0x2, 0xff}, {0x1ff, 0x3, 0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3501, 0x3, 0x3, 0xff, 0x9, 0x9, 0x2}}, 0xe8) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x74, r8, 0xd17, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4000000000000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000001}, 0x8040) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:34 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:34 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, 0x0, 0x0) [ 573.954474][T23964] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:35 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x34}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB="5100000036489ec72e9c6789ca07000000c100a952b9bf2f90b7ea4ce1fa97e50408d453b826b11503d18f4609e6bfd3ea8265331c489f9054da2b340105cce41ccbff901da2ce7947a19a22096c50b24c0086d37d516405aed6d5b3f377b44f27ea04a38f3b8f466a3ec64bf46fbd31adff28155b5ccf38b3ff842225b4606566b567bd7453f95c49fc2253a744e84ca77ad80c2813aa5e8509d61420af725da937ec74790fad5d538d02a7e2025b27eb6fb6"], &(0x7f00000001c0)=0x59) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 15:43:35 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:35 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 574.239500][T24023] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:43:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, 0x0, 0x0) [ 574.357562][T24080] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 15:43:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000040605000000000000000000030000088bb06ddb2ea5ed05000100070000000900020073797a3300000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000b32504c694329200"/64], @ANYBLOB="fe8000000000000000000000000000bb00000000000000000000ffffac1414bbffffff00ff000000ff000000ff000000000000ff000000ff00000000000000006970366772653000000000000000000069705f76746930000000000000000000ff000000000000000000000000000000000000000000000000000000000000002b00200508000000000000001801400100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000104000003010400090000000104da000800810009000700aa000600000400000400200008000c0028006d68000000000000000000000000000000000000000000000000000000007b2901000000000028004e465155455545000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800180100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000100000001000000050000002001000040004c4f47000000000000000000000000000000000000000000000000000000071011eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0001801000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000e74db010000000048004c454400000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000010200000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004072}, 0x4004000) 15:43:35 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 574.743721][T24091] x_tables: duplicate underflow at hook 2 15:43:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 15:43:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x1, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x10001, 0x1, 0x4, 0x2000000, 0x9c9c, {0x0, 0x2710}, {0x2, 0x0, 0x25, 0x8, 0x6, 0xfe, "66e77d57"}, 0x9, 0x4, @fd=r1, 0x4, 0x0, r4}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x5, 0x20}, &(0x7f0000000140)=0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:43:36 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 15:43:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 575.670877][T24217] x_tables: duplicate underflow at hook 2 15:43:36 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:37 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:37 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:37 executing program 1 (fault-call:8 fault-nth:0): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 576.490105][T24340] FAULT_INJECTION: forcing a failure. [ 576.490105][T24340] name failslab, interval 1, probability 0, space 0, times 1 [ 576.502963][T24340] CPU: 0 PID: 24340 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 576.511695][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.521800][T24340] Call Trace: [ 576.525181][T24340] dump_stack+0x1c9/0x220 [ 576.529616][T24340] should_fail+0xa4e/0xa60 [ 576.534130][T24340] __should_failslab+0x255/0x270 [ 576.539164][T24340] should_failslab+0x29/0x70 [ 576.543835][T24340] kmem_cache_alloc+0xd0/0xd70 [ 576.548662][T24340] ? kmsan_set_origin_checked+0x95/0xf0 [ 576.554324][T24340] ? __inet_hash_connect+0x123a/0x1fc0 [ 576.559875][T24340] ? kmsan_get_metadata+0x11d/0x180 [ 576.565148][T24340] __inet_hash_connect+0x123a/0x1fc0 [ 576.570682][T24340] ? inet6_hash_connect+0x1a0/0x1a0 [ 576.575988][T24340] inet6_hash_connect+0x176/0x1a0 [ 576.581150][T24340] dccp_v6_connect+0x1836/0x1dd0 [ 576.586205][T24340] ? dccp_v6_exit_batch+0x40/0x40 [ 576.591323][T24340] __inet_stream_connect+0x2fb/0x1350 [ 576.596776][T24340] ? __local_bh_enable_ip+0x97/0x1d0 [ 576.602146][T24340] ? kmsan_get_metadata+0x11d/0x180 [ 576.607425][T24340] inet_stream_connect+0x101/0x180 [ 576.612633][T24340] __sys_connect+0x6f7/0x770 [ 576.617295][T24340] ? __inet_stream_connect+0x1350/0x1350 [ 576.623019][T24340] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 576.629163][T24340] ? prepare_exit_to_usermode+0x1ca/0x520 [ 576.634973][T24340] __se_sys_connect+0x8d/0xb0 [ 576.639742][T24340] __x64_sys_connect+0x4a/0x70 [ 576.644589][T24340] do_syscall_64+0xb8/0x160 [ 576.649193][T24340] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.655134][T24340] RIP: 0033:0x45b399 [ 576.659116][T24340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.678779][T24340] RSP: 002b:00007fe56fd77c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 576.687257][T24340] RAX: ffffffffffffffda RBX: 00007fe56fd786d4 RCX: 000000000045b399 [ 576.695288][T24340] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000005 [ 576.703310][T24340] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 576.711333][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 576.719357][T24340] R13: 000000000000007e R14: 00000000004c1cc8 R15: 0000000000000000 15:43:37 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 15:43:37 executing program 1 (fault-call:8 fault-nth:1): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 577.020678][T24349] FAULT_INJECTION: forcing a failure. [ 577.020678][T24349] name failslab, interval 1, probability 0, space 0, times 0 [ 577.033850][T24349] CPU: 1 PID: 24349 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 577.042585][T24349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.052690][T24349] Call Trace: [ 577.056079][T24349] dump_stack+0x1c9/0x220 [ 577.060496][T24349] should_fail+0xa4e/0xa60 [ 577.065012][T24349] __should_failslab+0x255/0x270 [ 577.070059][T24349] should_failslab+0x29/0x70 [ 577.074738][T24349] kmem_cache_alloc_node+0xfd/0xed0 [ 577.080019][T24349] ? __local_bh_enable_ip+0x97/0x1d0 [ 577.085398][T24349] ? __alloc_skb+0x208/0xac0 [ 577.090077][T24349] ? kmsan_get_metadata+0x4f/0x180 [ 577.095271][T24349] ? kmsan_internal_set_origin+0x75/0xb0 [ 577.101001][T24349] __alloc_skb+0x208/0xac0 [ 577.105577][T24349] ? dccp_feat_finalise_settings+0x391/0x490 [ 577.111632][T24349] dccp_connect+0x68b/0xd10 [ 577.116237][T24349] dccp_v6_connect+0x19f3/0x1dd0 [ 577.121302][T24349] ? dccp_v6_exit_batch+0x40/0x40 [ 577.126508][T24349] __inet_stream_connect+0x2fb/0x1350 [ 577.131992][T24349] ? __local_bh_enable_ip+0x97/0x1d0 [ 577.137382][T24349] ? kmsan_get_metadata+0x11d/0x180 [ 577.142669][T24349] inet_stream_connect+0x101/0x180 [ 577.147881][T24349] __sys_connect+0x6f7/0x770 [ 577.152549][T24349] ? __inet_stream_connect+0x1350/0x1350 [ 577.158288][T24349] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 577.164447][T24349] ? prepare_exit_to_usermode+0x1ca/0x520 15:43:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x893b, 0x0) set_mempolicy(0x4003, &(0x7f0000000000)=0x5, 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) ftruncate(r12, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000380)={'team0\x00', r16}) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r19, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r22) ftruncate(r22, 0x0) getsockname$packet(r22, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r24) ftruncate(r24, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r28}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r28}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r24, 0x8933, &(0x7f0000000740)={'wireguard0\x00', r28}) r30 = socket$netlink(0x10, 0x3, 0x0) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r31, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r33}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r33}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r36, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r36, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r35, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r37}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket$nl_route(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r39, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r41}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r41, 0x4000, 0x40100}, [@IFLA_PROTO_DOWN={0x39, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x5, 0xa, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000041}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x10c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40a20567546b862f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r23}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r29}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r33}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r37}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x810) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r42 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80082, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r42, 0x12, 0x2, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=0x32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r42, 0x40505330, &(0x7f00000001c0)={{0x8, 0x8}, {0x60, 0x6}, 0x4ef, 0x6, 0x4}) syz_emit_ethernet(0x300cce, &(0x7f0000000140)=ANY=[@ANYBLOB="aa609daaaaaa0000000000009148d63720730000008100000086dd6000"/67], 0x0) [ 577.170266][T24349] __se_sys_connect+0x8d/0xb0 [ 577.175041][T24349] __x64_sys_connect+0x4a/0x70 [ 577.179893][T24349] do_syscall_64+0xb8/0x160 [ 577.184499][T24349] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 577.190441][T24349] RIP: 0033:0x45b399 [ 577.194412][T24349] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:43:38 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 577.214088][T24349] RSP: 002b:00007fe56fd77c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 577.222586][T24349] RAX: ffffffffffffffda RBX: 00007fe56fd786d4 RCX: 000000000045b399 [ 577.230616][T24349] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000005 [ 577.238646][T24349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 577.246682][T24349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 577.254712][T24349] R13: 000000000000007e R14: 00000000004c1cc8 R15: 0000000000000001 15:43:38 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 577.402949][T24353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.453968][T24353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:38 executing program 1 (fault-call:8 fault-nth:2): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 577.519371][T24362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.605954][T24353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.646484][T24353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.657908][T24365] FAULT_INJECTION: forcing a failure. [ 577.657908][T24365] name failslab, interval 1, probability 0, space 0, times 0 [ 577.671135][T24365] CPU: 0 PID: 24365 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 577.679871][T24365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.689984][T24365] Call Trace: [ 577.693368][T24365] dump_stack+0x1c9/0x220 [ 577.694683][T24353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.697789][T24365] should_fail+0xa4e/0xa60 [ 577.697866][T24365] __should_failslab+0x255/0x270 [ 577.697958][T24365] should_failslab+0x29/0x70 [ 577.721258][T24365] __kmalloc_node_track_caller+0x1c3/0x1200 [ 577.727242][T24365] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 577.732771][T24365] ? dccp_connect+0x68b/0xd10 [ 577.737533][T24365] ? dccp_connect+0x68b/0xd10 [ 577.742293][T24365] __alloc_skb+0x2fd/0xac0 [ 577.746863][T24365] ? dccp_connect+0x68b/0xd10 [ 577.748752][T24362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.751636][T24365] ? dccp_feat_finalise_settings+0x391/0x490 [ 577.751691][T24365] dccp_connect+0x68b/0xd10 [ 577.751772][T24365] dccp_v6_connect+0x19f3/0x1dd0 [ 577.776585][T24365] ? dccp_v6_exit_batch+0x40/0x40 [ 577.781693][T24365] __inet_stream_connect+0x2fb/0x1350 [ 577.787163][T24365] ? __local_bh_enable_ip+0x97/0x1d0 [ 577.792541][T24365] ? kmsan_get_metadata+0x11d/0x180 [ 577.797263][T24362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.797830][T24365] inet_stream_connect+0x101/0x180 [ 577.812249][T24365] __sys_connect+0x6f7/0x770 [ 577.816915][T24365] ? __inet_stream_connect+0x1350/0x1350 [ 577.822634][T24365] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 577.828782][T24365] ? prepare_exit_to_usermode+0x1ca/0x520 [ 577.834614][T24365] __se_sys_connect+0x8d/0xb0 [ 577.837019][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.839383][T24365] __x64_sys_connect+0x4a/0x70 [ 577.839440][T24365] do_syscall_64+0xb8/0x160 [ 577.839534][T24365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 577.863889][T24365] RIP: 0033:0x45b399 [ 577.867864][T24365] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.879253][T24353] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 577.887528][T24365] RSP: 002b:00007fe56fd77c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 577.887582][T24365] RAX: ffffffffffffffda RBX: 00007fe56fd786d4 RCX: 000000000045b399 [ 577.887613][T24365] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000005 [ 577.887643][T24365] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 577.887672][T24365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 577.887700][T24365] R13: 000000000000007e R14: 00000000004c1cc8 R15: 0000000000000002 15:43:39 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 15:43:39 executing program 1 (fault-call:8 fault-nth:3): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 578.389967][T24375] FAULT_INJECTION: forcing a failure. [ 578.389967][T24375] name failslab, interval 1, probability 0, space 0, times 0 [ 578.402972][T24375] CPU: 1 PID: 24375 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 578.411714][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.421829][T24375] Call Trace: [ 578.425818][T24375] dump_stack+0x1c9/0x220 [ 578.430245][T24375] should_fail+0xa4e/0xa60 [ 578.434768][T24375] __should_failslab+0x255/0x270 [ 578.439806][T24375] should_failslab+0x29/0x70 [ 578.444485][T24375] kmem_cache_alloc+0xd0/0xd70 [ 578.449364][T24375] ? skb_clone+0x328/0x5d0 [ 578.453859][T24375] ? kmsan_get_metadata+0x11d/0x180 [ 578.459150][T24375] ? kmsan_get_metadata+0x11d/0x180 [ 578.464453][T24375] skb_clone+0x328/0x5d0 [ 578.468785][T24375] dccp_connect+0x8e4/0xd10 [ 578.473394][T24375] dccp_v6_connect+0x19f3/0x1dd0 [ 578.478455][T24375] ? dccp_v6_exit_batch+0x40/0x40 [ 578.483576][T24375] __inet_stream_connect+0x2fb/0x1350 [ 578.489048][T24375] ? __local_bh_enable_ip+0x97/0x1d0 [ 578.494548][T24375] ? kmsan_get_metadata+0x11d/0x180 [ 578.499827][T24375] inet_stream_connect+0x101/0x180 [ 578.505041][T24375] __sys_connect+0x6f7/0x770 [ 578.509725][T24375] ? __inet_stream_connect+0x1350/0x1350 [ 578.515449][T24375] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 578.521602][T24375] ? prepare_exit_to_usermode+0x1ca/0x520 [ 578.527446][T24375] __se_sys_connect+0x8d/0xb0 [ 578.532228][T24375] __x64_sys_connect+0x4a/0x70 [ 578.537078][T24375] do_syscall_64+0xb8/0x160 [ 578.541683][T24375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.547630][T24375] RIP: 0033:0x45b399 [ 578.551604][T24375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.571287][T24375] RSP: 002b:00007fe56fd77c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 578.579751][T24375] RAX: ffffffffffffffda RBX: 00007fe56fd786d4 RCX: 000000000045b399 15:43:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 578.587765][T24375] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000005 [ 578.595766][T24375] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 578.603773][T24375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 578.611781][T24375] R13: 000000000000007e R14: 00000000004c1cc8 R15: 0000000000000003 [ 578.657543][T24362] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 578.707145][T24353] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 15:43:40 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:40 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r1, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:40 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0x138, 0x138, 0x138, 0x138, 0x138, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@inet=@socket2={{0x28, 'socket\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/meminfo\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 15:43:40 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000080)=0x200) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000ac0)={0x14, r5, 0x7d7f282ad3c7b35}, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5a72}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, @generic={0x3, "178d328d331fb1df2beaa60197de"}, @can={0x1d, r17}, @sco={0x1f, @fixed={[], 0x11}}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)='veth1_to_bond\x00', 0x4, 0x800, 0x7f}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r19) ftruncate(r19, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r23}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000400)={'veth0\x00', r23}) clock_gettime(0x0, &(0x7f0000006e80)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/65, 0x41}, {&(0x7f00000006c0)=""/142, 0x8e}], 0x5, &(0x7f0000000d80)=""/196, 0xc4}, 0x7fff}, {{&(0x7f0000000800)=@ax25={{0x3, @netrom}, [@null, @null, @remote, @rose, @null, @rose, @null]}, 0x80, &(0x7f0000002300)=[{&(0x7f0000007300)=""/261, 0x105}, {&(0x7f0000000f80)=""/78, 0x4e}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f0000001000)=""/69, 0x45}, {&(0x7f0000001080)=""/115, 0x73}, {&(0x7f0000001100)=""/10, 0xa}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/75, 0x4b}, {&(0x7f00000021c0)=""/250, 0xfa}, {&(0x7f00000022c0)}], 0xa, &(0x7f00000023c0)=""/105, 0x69}, 0x4}, {{&(0x7f0000002440)=@x25, 0x80, &(0x7f0000003800)=[{&(0x7f00000024c0)=""/25, 0x19}, {&(0x7f0000002500)=""/12, 0xc}, {&(0x7f0000002540)=""/169, 0xa9}, {&(0x7f0000002600)=""/100, 0x64}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/91, 0x5b}, {&(0x7f0000003700)=""/174, 0xae}, {&(0x7f00000037c0)=""/49, 0x31}], 0x8, &(0x7f0000003880)=""/255, 0xff}, 0x8}, {{&(0x7f0000003980)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003a00)=""/108, 0x6c}, {&(0x7f0000003a80)=""/131, 0x83}, {&(0x7f0000003b40)=""/168, 0xa8}], 0x3, &(0x7f0000003c40)=""/77, 0x4d}, 0x4}, {{&(0x7f0000003cc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d40)=""/169, 0xa9}, {&(0x7f0000003e00)=""/253, 0xfd}, {&(0x7f0000003f00)=""/92, 0x5c}], 0x3, &(0x7f0000003fc0)=""/70, 0x46}, 0x2}, {{&(0x7f0000004040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000004100)=""/183, 0xb7}, {&(0x7f00000041c0)=""/183, 0xb7}, {&(0x7f0000004280)=""/3, 0x3}], 0x4, &(0x7f0000004300)=""/54, 0x36}, 0x58f}, {{&(0x7f0000004340)=@caif=@util, 0x80, &(0x7f00000054c0)=[{&(0x7f00000043c0)=""/121, 0x79}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/61, 0x3d}, {&(0x7f0000005480)=""/50, 0x32}], 0x4}, 0x3000000}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005500)=""/146, 0x92}, {&(0x7f00000055c0)=""/221, 0xdd}, {&(0x7f00000056c0)=""/218, 0xda}, {&(0x7f00000057c0)=""/234, 0xea}, {&(0x7f00000058c0)=""/180, 0xb4}], 0x5}, 0x3}, {{&(0x7f0000005a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005a80)=""/4096, 0x1000}, {&(0x7f0000006a80)=""/44, 0x2c}, {&(0x7f0000006ac0)=""/100, 0x64}], 0x3, &(0x7f0000006b80)=""/166, 0xa6}, 0x2}], 0x9, 0x0, &(0x7f0000006ec0)={r25, r26+30000000}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000006f00)={@local, 0x0}, &(0x7f0000006f40)=0x14) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r30, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r32}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r32}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000006f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006fc0)=0x14, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r36, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r36, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r35, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r37}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r37}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket$nl_route(0x10, 0x3, 0x0) r40 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r40, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r39, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r41}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r41}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000007000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007040)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007080)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000007180)=0xe8) r44 = socket$netlink(0x10, 0x3, 0x0) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r46, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r46, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r45, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000004cd635de000000000000070000000000", @ANYRES32=r47, @ANYBLOB="00000000000000001400128000000100000000000000000000000280"], 0x34}}, 0x0) sendmsg$nl_route(r44, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r47}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r48) ftruncate(r48, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r48, 0x0, 0x10, &(0x7f00000071c0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f00000072c0)=0xe8) r50 = socket$netlink(0x10, 0x3, 0x0) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r52, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r51, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r53}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r50, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r54 = socket$netlink(0x10, 0x3, 0x0) r55 = socket$nl_route(0x10, 0x3, 0x0) r56 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r56, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r56, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r55, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r57}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r54, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r57}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r58 = socket$netlink(0x10, 0x3, 0x0) r59 = socket$nl_route(0x10, 0x3, 0x0) r60 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r60, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r60, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r59, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r61}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r58, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r61}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r62 = socket$netlink(0x10, 0x3, 0x0) r63 = socket$nl_route(0x10, 0x3, 0x0) r64 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r64, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r64, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r63, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r65}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r62, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r65}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r66 = socket$netlink(0x10, 0x3, 0x0) r67 = socket$nl_route(0x10, 0x3, 0x0) r68 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r68, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r68, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r67, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r69}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r66, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r69}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) accept4$packet(r1, &(0x7f000000a9c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000aa00)=0x14, 0xc0000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r71) ftruncate(r71, 0x0) r72 = socket$netlink(0x10, 0x3, 0x0) r73 = socket$nl_route(0x10, 0x3, 0x0) r74 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r74, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r74, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r73, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r75}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r72, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r75}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r71, 0x8933, &(0x7f000000aa40)={'rose0\x00', r75}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r77) ftruncate(r77, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r77, 0x8933, &(0x7f000000be80)={'team0\x00', 0x0}) r79 = socket$netlink(0x10, 0x3, 0x0) r80 = socket$nl_route(0x10, 0x3, 0x0) r81 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r81, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r81, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r80, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r82}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r79, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r82}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r83 = socket$netlink(0x10, 0x3, 0x0) r84 = socket$nl_route(0x10, 0x3, 0x0) r85 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r85, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r85, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r84, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r86}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r83, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r86}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f000000ca00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c9c0)={&(0x7f000000bec0)={0xad0, r5, 0x96347bd2d626e5a1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r13}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r27}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x867a, 0x1, 0x40, 0x96}, {0x1ff, 0x9f, 0x6, 0x3}, {0x4, 0x6}, {0x8, 0x81, 0x7, 0x6}, {0x3, 0x81, 0x3, 0x7f}, {0x7, 0x1f, 0x0, 0x1000}, {0x6, 0x0, 0x6, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r32}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1bdf7863}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfbb0}}, {0x8, 0x6, r41}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r42}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r43}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xf5b}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xf6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r47}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r49}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r53}}}]}}, {{0x8, 0x1, r57}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r61}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r65}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r69}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r70}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r76}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r78}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xffd3, 0x81, 0x0, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r82}}, {0x8}}}]}}, {{0x8, 0x1, r86}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x2, 0x9, 0x7f, 0x55}, {0x1, 0xff, 0xa, 0x4}]}}}]}}]}, 0xad0}, 0x1, 0x0, 0x0, 0x20000005}, 0x40040) ftruncate(r3, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={r87, &(0x7f0000000200)=""/255}) r88 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r88, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 579.805100][T24406] xt_connbytes: Forcing CT accounting to be enabled 15:43:40 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 579.812540][T24406] xt_CT: You must specify a L4 protocol and not use inversions on it 15:43:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) dup2(r0, r3) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'gretap0\x00', 0x1f}) [ 579.914131][T24406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 580.062678][T24419] __nla_validate_parse: 5 callbacks suppressed [ 580.062710][T24419] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @ipv4={[], [], @remote}}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 15:43:41 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:41 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) r6 = accept4$phonet_pipe(r5, 0x0, &(0x7f0000000040), 0x80800) write$midi(r4, &(0x7f00000000c0)="fd6d385a54de20839e7edd5091104133705db0c32631ef717c49444ddfaaee17f1249116bde9bcbe8e44a4087f430340ab00a555f6f7767121bcb97d0917d4c7174da9f9230c068e71d1d9baa61cf755ac1b7a45f499b8dfa8aeb433b058c4d7d84f457bb996b6ae", 0x68) connect(r2, &(0x7f00007a8000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @loopback}, 0x4, 0x1, 0x1, 0x3}}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000000)=""/14, 0xe}], 0x6}}], 0x1, 0x42, 0x0) timer_create(0x2, &(0x7f00000003c0)={0x0, 0x6, 0xd6e45f4f83d7ff3c, @thr={&(0x7f0000000040)="e51586", &(0x7f00000001c0)="6b40e0efb3bb37fe077010299e458395736a9c0883d82f7fe7a6fe739b5c1f4c0e253aff7e615070aafbfa5e9de9cf710256005c564a32e5804b4c2fd938e1b853e8b921e690095d038713fc1a9432d302b2b61e60865a4478ca2c3c196341f59bbdda749db8506d0f438a95ce852c0b7120a5b1bcc0c2acc0aa67d8d6fa49d663af6b94354967694d5aef8ef24441c7eb0b70fc27e55d80d7d17652313b7e5601a952c2bac5382fb03591bde59e759fdac4346a3528c18e18cfc6527271731fbe5fc8e6275c33bc53028e63d1da735b6fc3cc45b09f68e5c951f3397820d87f11b89c51473b0ac9fa4041c5c81f1e2ed4d4f6a7"}}, &(0x7f0000000540)) 15:43:41 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r7, 0x7f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000100)={r8, 0xb0, "5d002474818af27d0d629ddffccf9b936edd80744e768ec7727667cc2b054a212af756cdda361d234dc7a9515e4344dcd257345095812efcc5493cbd99612ff9c3630d37f2fd6df40b85c54cf5f22ee20eb0119e73bd873c1c0d292816d84f301ab1288218b61e991618700230c666997f5e2c6f5bdd38e69d61f6801dbfc59a6cffce64d9905e35d5f81b7f016378f883cb99ca8e438e0adb2da5ff00ccf5dc0223a07a950475166515834e0b3aa95f"}, &(0x7f00000001c0)=0xb8) 15:43:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="9c6e766d99d17d2020a70a6cfc426acbed38611a15f97e8c710179c0819a7f81acbbed9f355c4aa5ce195c9b3c1fca5f8dd47e5553b7f5922b", @ANYRESOCT=r7, @ANYRESHEX=r3, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRESHEX=r4], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR64, @ANYBLOB="a3439d320ca240a2d3092cede45aea60f0ce5568e358184c9b2d0f7cc6653a32d8166cc671d5c010f16a51391ed5dc73852ae4ce99ecca5fe5bba0c22fa05b89df19cb992c5a46a68017e5b55b82c102b9d2b86c8a0b57273eade89960", @ANYRES16=r5, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r8], @ANYRESHEX=r6]]], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$TIOCCONS(r9, 0x541d) 15:43:42 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:42 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:43 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x8000, 0x6, 0x1ff, 0xffffffff]}) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001000010400000000000000000000002d66f45da7b9", @ANYRES32=r7, @ANYBLOB="00000000000000001400128000000100000000000000000000000280"], 0x34}}, 0x0) r8 = getpid() syz_open_procfs(r8, &(0x7f0000000080)='comm\x00') r9 = getpid() syz_open_procfs(r9, &(0x7f0000000080)='comm\x00') clone3(&(0x7f0000000e40)={0x4008c400, &(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0), {0xf}, &(0x7f0000000800)=""/142, 0x8e, &(0x7f0000000d80)=""/74, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0x0, r9], 0x5}, 0x50) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000f00)={{0x9, 0x5, 0x8, 0x3, 'syz1\x00', 0x7ff}, 0x2, 0x10000620, 0x0, r10, 0x2, 0xffff, 'syz1\x00', &(0x7f0000000ec0)=['&:vboxnet0-em0\x00', 'trusted\x00'], 0x17, [], [0x4, 0x400, 0x1000, 0x9]}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$xdp(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x2c, 0x2, r7, 0xf}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000200)="6ede288f521ee492452e5b693230451a87f2e009252d2a98e320862d60b986ebb9503152ba0711021183f904548cc5f12191dd07132deace45bfd6638445256fcee0aed0f01c556451ab381f72ad222a6464e003fc456b93ca9098f73f6992a6c90d9c4a42299e6848e6eb2a98c00aad1c2b1c9d531b38674527176d9b14deec09881ddf29b049b2d837e1e069a5d0a6a0443735e6b3043cf74b69f4475cd5bb18352f40057cd22b9a", 0xa9}, {&(0x7f00000002c0)="75b9310d2d7c44461e0d54b410befec4eb02ccf31dc872edfaf2d6342dda7ad66025271989606b05a0099f2ef720af9272cdb054897fccddef75f3c014381542259f9bff38610a9d6ed3026ab4ee87ceb80473ab4fd4bec8799345899b5f1187c317e54b7cfe56e3a72dfa7945e84c3138350cb1d401b0df70dd7cd08a413385bea12dcd2111fa6c037dd83ad31c6ddd6f96f801b5360f5f13b13842c374c095a946c0ff3f7fecbd96c872ccc5449222b3f4314afc26ad57aa7071932fa281d1fdd6958f1654ef1c1622782562d8", 0xce}, {&(0x7f0000000080)="e38d063cddebb1705c9fd70ef17f07999ff8a2", 0x13}, {&(0x7f00000003c0)="a0b4a1e82db1bdea8409153851bffc1877f2c88961cae8cebf2c7b319ca276c8c6ae442de3c74f237f75d66f29750ad96d9f5c02024d78177274e41aa9a6fe5902a788ea3b779f99c8fc8d028ca6f25225a6b7", 0x53}, {&(0x7f0000000440)="49e1bc5163187c41893b5e0e8cb016cd74058316b0d8d2b9d38f2a7d8120bbcf7e13b8ab1ebf1852043fa5b9c66641c673691bcaa1baa97a66b68609cee3be9c97e09f63ce3c1773dc706cc117ce48067103c851e63bc86913a43fe9d05a5b9e22746280b157", 0x66}, {&(0x7f0000000140)}, {&(0x7f00000004c0)="c91057a2", 0x4}, {&(0x7f0000000500)="9db9f02ede670e3edc7b5bb8fa21aec553f80fb83cdd2fd285d40954b4b5cfe18a83c24fdf47a7aa2327", 0x2a}, {&(0x7f0000000540)="5cdc87c3d9d5af9819e5fedf5b2ae496e455044cbf0ec682f3b244bd09053ad9eadd5d322b3f9cb69f0015bd5d5b53f263e00e28bf22fba93fc00bf04cad75cab279bb3f80848b5592a78e89d7c4472a65e5b28753d12331c3de83b2f03ac373587f036dcd34a3d0de270c5abb34eea0cf3d2918261e31b170c941dae1b74b60bc427a3d47be064efe1aae38d235317ace43feba7811dce0c4f23a9890fb931c4049c940f2bb440a", 0xa8}], 0x9}, 0x4040414) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:43 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 582.194436][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 15:43:43 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:43:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x3, 0x7b}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x1, 0x626cf397, 0x101, r8}, 0x10) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xfffefffd, @empty, 0x1ffffffc}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 582.958557][T24806] x_tables: duplicate underflow at hook 2 15:43:44 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:44 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) connect(r2, &(0x7f00007a8000)=@generic={0x3, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:44 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:44 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4ea0, 0x0, @rand_addr, 0x7fffffff}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0xa, 0x81) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) [ 583.616477][T24930] x_tables: duplicate underflow at hook 2 15:43:44 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000804) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:45 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 584.214911][T25049] x_tables: duplicate underflow at hook 2 15:43:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:45 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}, 0x0) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 584.788994][T25166] x_tables: duplicate underflow at hook 2 15:43:46 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200"], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:46 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:46 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200"], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:46 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f0000000400)="6e6c76315ed0cc54bdd6e47e0046a7cc4774057fa5a442f4ed6be021e3f043f9d1840d32a70c0fc47b5a6d55130943abf3937c83fc15c3bb3eb645556d023e51f36580d7235d3f8634baa53ee1d74b4345502bf19ccdf9888545a4c48d3fca54995e519fe74a4edee4e92f58b16678104d6047a143793832374645aec91b1b7200838785549a05badb672e559a76e64e187a3f88aeda307178004fb365674a4f101ad8905d423fe76acc7bc5b072dca7578837bc1d12bc51fb70c952e2a943ff9b45310446917aa2828cad1597aa8a1b36b8873752a955209d9de8aa6002fd7b0d4e0335b2faa90e0e682a8ee5ff", 0xee) r3 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r5, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}}, 0x4080) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010090}, 0xc804) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:46 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x6, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 585.482163][T25291] x_tables: duplicate underflow at hook 2 15:43:46 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200"], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:46 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004008}, 0x20000000) 15:43:47 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x4b81) listen(0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0xadd0, "94b25a533f1aafb26d12d871bb970f34"}, 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)={0x3, 'team_slave_0\x00', {0x3}, 0x4}) ftruncate(r3, 0x0) connect(r2, &(0x7f00007a8000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0x3, @loopback, 0x6}}}, 0x80) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x10080) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 586.069489][T25414] x_tables: duplicate underflow at hook 2 15:43:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:47 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x4) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000000c0)={0x802b, 0x2}) connect(r1, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x9) 15:43:47 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x9, 0x2, 0x2b, &(0x7f0000000200)}) clone(0x2000000002010100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 586.590183][T25535] x_tables: duplicate underflow at hook 2 15:43:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB, @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:47 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xd) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xb6100) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:48 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) socket$tipc(0x1e, 0x5, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r7, 0x201c, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0xfffffd25}]) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x100, r8, 0x0}]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) ftruncate(r11, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) ftruncate(r12, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0x990000, 0x0, 0x7, r12, 0x0, &(0x7f0000000240)={0x990af7, 0x3, [], @p_u8=&(0x7f00000001c0)=0x4}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) ftruncate(r14, 0xfffffffffffffff9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) ftruncate(r15, 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff}, 0x104000) io_submit(r3, 0x5, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xfb, r9, &(0x7f0000000040)="ff4cd6e79d9927fd4cefcea4473507f55f18f6278883a0e8efe23bbd19cf5dbc017ecd3d2430c2913997b081029f548f82e411c912daf3f4d3aa757502b2867749d646f1bc67f709fc26d38b36fb7339e433c325ef7c71303c9b40da40755c8240dce8a6eba91b3719143919c5fad1d674b18968446dee8e5db83bdefad767301158602e62085096194f22c917b3a2cd7f37354419d8f7ae5f42ce7cb28615ee2628a1032a546d398e2742bb59fa4c706b3e818bb88e1beb", 0xb8, 0x7f, 0x0, 0x2, r10}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x1, r11, &(0x7f0000000180)="29427ace7035289935411d392c99e49fb9c36b2741cbd065d224b8", 0x1b, 0xfff, 0x0, 0x0, r13}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000300)="f8b4c2ae66d2562b2a5c52b86c982ef138ad00c2f027a10a8cc21ef4b8a5dde33e51db72d727282194f863e756c79a9b242010ddc955d989ce8552ac7daf349b2004f553bc3aabd3c319e801d51ae3c52ae592fcf629b42d973f9d3ade1d259f66d5ddf9459cb02707911ba4f3b4bfeb27e070e9392688a5e559d6fd448268ce1c5b169d20033be6d275cb54f7d19b8742f6898160", 0x95, 0x1, 0x0, 0x3, r14}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xe, 0x4, r15, &(0x7f0000000440)="e6f475d4cfcd614590db5f6bc663332f42ec2a74ec9571b8eef7d8ac619f689ab47e002e454c95d6ffa63f70487ed53e02c07d194dbc8ab3c57939", 0x3b, 0xfffffffffffffffb, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x9, r16, &(0x7f0000000500)="7b51b08e1a97bb200d0feaf3bdc46283ad9becf4ae8e7e2476b51e4f8986cbc45e0e1c922aec6327f08ea40174e03dc4213bdeff406a3db75eac1d7adb", 0x3d, 0x7fffffff, 0x0, 0x1}]) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:48 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB, @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:48 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x40080) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800400004060500000700ed000900020029e8c13875bf3e3f8e699c797a3200"/54], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:48 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB, @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:48 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:48 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:48 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @ipv4={[], [], @broadcast}, 0xb81}, 0x1c) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000180)=0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x84, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x8}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x57, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0xffff, @mcast1, 0x3}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x27}, 0x8000}]}, &(0x7f0000000140)=0x10) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r8, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:48 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) ftruncate(r10, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="523605f259e3fbbd848b5b4ecef6cd3ef00c64e02859665920d83e64a2c2988378e39c810bcf8e7456010cf72eb375275d51472580daa47724716f77dfdaf8d3c05b1452f25a6396a0e24b0c37e9d900ed4eaa5f8e417620e419a34b1894b41d8ad207453254215eaca7888b5f8182509121c0f1e25ae7b14c7f046b27d0507151bc81306278550cc97f53f9630ec015c38216", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES64=r5, @ANYRES32=r6, @ANYRESDEC, @ANYRESDEC], @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYRESDEC=0x0], @ANYRESOCT=r2, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32]], @ANYRES16=r3], 0x8}, 0x1, 0x0, 0x0, 0xc5}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:49 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 588.107735][T25690] x_tables: duplicate underflow at hook 2 15:43:49 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:49 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r7}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x100, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xa10901, 0x3, [], @p_u8=&(0x7f00000000c0)=0x1f}}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r7, 0x200}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:49 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:49 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x80000001}, @mss={0x2, 0x8}], 0x3) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x0, 0x800, 0x80000000, 0x3, 0xfe7}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r4, 0x8}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 588.706659][T25812] x_tables: duplicate underflow at hook 2 15:43:49 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:50 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000000c0)={0x6, 'veth0\x00', {0x3}, 0x7fff}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:50 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:50 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000006c0)={0x6, 0x3, 0x4, 0x2000, 0x9, {r2, r3/1000+10000}, {0x1, 0x8, 0x68, 0xff, 0x1, 0x8, "53399efc"}, 0x31, 0x6, @planes=&(0x7f0000000080)={0x8c0, 0x4, @mem_offset=0x2, 0x8}, 0x1, 0x0, r4}) sendmmsg$alg(r5, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x24000000}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000740)="7f8087e24f0fdc6f69315d1e492bc32965f221755e12eaeff793c69c8bda1f5903cd25807d", 0x25}], 0x1, &(0x7f00000007c0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xf8, 0x117, 0x2, 0xdf, "261a31cf3cb64db1b76883d535e424f60752d25e5f6a1c75001b834baf81c463c90fdb5b42e8eacce3062acdebd6115e7cc5b37568182d9549acef2faa7777611ea3866123b585d29cfae3befd5e09fdede0d1ac0207431d8d9fcfaf9c0590c288926633b25e6c352c70b7f8ab207048426f425b3f1e412f145ccb18c3709d2b0baa9cab763a81484e404c1034d6ed46ac1dec176a27a2ef8f7bbd890077c4deeb238b72d980fb4a0036dc828b014855fe5763446f8fa556433d5ea8766182de47384cd55aaca036cf3d8e50776aa2f6c7bfa81697f67dc6aeddab1460e367"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1170, 0xc8c4}], 0x2, 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4a0) 15:43:50 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:50 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:50 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e0000000000200012000800010073697400140002000800140008000000", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:50 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e0000000000200012000800010073697400140002000800140008000000", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:50 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:50 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xfc) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x84000, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x1f, &(0x7f00000000c0)={[0x35]}, 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) socket$alg(0x26, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0xa20000, 0xaef, 0x0, r1, 0x0, &(0x7f0000000000)={0x9a0912, 0x8000, [], @value64=0x8}}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYPTR], 0x1}, 0x1, 0x0, 0x0, 0x40004}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e0000000000200012000800010073697400140002000800140008000000", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 590.084643][T26071] x_tables: duplicate underflow at hook 2 15:43:51 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:51 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x5, @local, 0x8, 0x4}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e00000000002000120008000100736974001400020008001400080000000800", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x3, 0x1, r0, 0x0, &(0x7f0000000140)={0x990a7e, 0x20, [], @string=&(0x7f0000000080)=0x81}}) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00346e5501d400000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4a0) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000016c0)=[{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000780)="1336303867cf88100e4800a2a0979b141ae79bf123998311bdb9b4db0463069d78f4b0e66b30ef46155f86a4e6ebaaa7d5122300f627a6e9cfd52fe7b03e1fcc56e8b5c9ac03b1e9fd4c2473f0129ecddbb30b281c43334e9afde4cab08ef004edbe5ffaf2fd55eefdaf58c20797109692f4613f", 0x74}, {&(0x7f0000000800)="f6c1e5b2c3d6464803e8c0268a138f0dc4c43fdf9d99d4d9a8afcdf197f8e06abb3246", 0x23}, {&(0x7f0000000840)="215aad513eeaecd0a5c4ab8b66671eeb58be20d09b8f471414f5e8c5fbf6f4984cd16708e00427c43cb440ba7355d0f6c78641172ce7c0e56dab33c22ca7810b7b92e1a99401c48c2704b2c08fe3929a6d5fcd6ee6f6387e47af362780eb1d38a3cc5354010ae3032332f12c88dfca", 0x6f}, {&(0x7f00000008c0)="8cba78b8eefade6a9100c550dc4f15e599451a4f7d", 0x15}], 0x4, 0x0, 0x0, 0x4000001}, {&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="9d9297ab1948f32cf8dd21b0b1cb0be1918512cf7a0e6885dae859167fb61ba6b6c44df8030d75f119b2dc9776cff75eec172d2af9354919", 0x38}, {&(0x7f0000000a00)="db45", 0x2}, {&(0x7f0000000a40)="d5456d9d8163238931b0d62985bce28d60b5bb44554437ab6ae3", 0x1a}, {&(0x7f0000000a80)="e3041569cbfdf6", 0x7}, {&(0x7f0000000ac0)="1cf0a97b2e24f2e4f330534592b997a13dd9ab9bb3a6ee862add4462cf421bdfb5d2736b15ca1d49c30eb96bfb4b5a631f25bf7a2f56a676967b6f93fa262fff0274f316c2d64bf3aefcc1d189673a5050182ea994301d7e3f29975505c88c66ecabbf7cb8dc72d2cd51e0cf8254aac54f17c77beef8ca913004c6959de9207c39aabfa9205eb03cd723032027f9760bc646bdaeb05ceb6a969b4a24", 0x9c}, {&(0x7f0000000b80)="1832a881e8a8b05f72b73e7fd697886015a6", 0x12}], 0x6, 0x0, 0x0, 0x20000000}, {&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000cc0)="3f39d60bb1b7e97a541f4f558b26b6628fdc5d428980da2f0408b9d7ed69b0c8417b2e3c73b14ad3c7517c2c123b858e90119fb9907ab727bd09b12898120c", 0x3f}, {&(0x7f0000000d00)="1a98f4bd5e4cabe0ae69ed84ecd7f085424241115aa8d5e9422ea7072dc4ff003b24b4f4dfb5fc1b7753d6f1a85c531b7d2f3a2bf7fdf4fe6829fd473e6e77e52bc64005626e24cfa16801c138c353c06c5cefce593ca9d74e792fbf6493531e801b00be80fe387c278498e09a9709062089f5aa7abc179d09921bdf8b769eaffa58c990a187b53da153b56074c9fe28b6e1b6dd08a634a58a1d9652", 0x9c}, {&(0x7f0000000dc0)="4b804b5e362f50d575d43da9bb4275db7071021f672bb8dd3a4f0bad9ed0fe521bab96e76857001e020f428d4c996298ec9dbccb19e007d4c53a414d9fe825add7b9929a4e0730baf0385ee7c8a14d5ad927488566dd42b0e8012df71e1c1714a2e119c8f9ff920f171f31deb3b9c2e5a6951da569af78fe88772438e4e2d9ee1eaf3c778a2bb8bad7c587de792203096c9ebd87d87d1065d244fc10b87e08120f60d27371d762e141e36f0d015ca83a74dc045adc2252189ffec55ae6b46817985326f4900c32e8458af468b6e942d7b6eec237e0745372a492f2a2e2a4", 0xde}, {&(0x7f0000000ec0)="016ce459ca9f7b91cd5f38917606e632a92087c893167bcc00779fa80e708acfb11d1c072e21d4dd39ba3b15924c81335148d7c423da10522db1af7c889356aaf3c5ace5b7427f592947d63eced5c4e7b995b663a102c0c8236df2ca24bc66b8139733d7df27c48275972cb836846fd2b404a4b3", 0x74}, {&(0x7f0000000f40)="a398e9bd5980e0cd3070afa99b0c0206021de70ffb91ce31aac4f99579021c080c8a1d4c86f2f8fcbcb146d58ee304984edd024bee4772b54b6039bc51b92fc073afb2f08f41637e38a9116ed2ac4461e2ff563896470e1ab1c8f14d2b99956b92697b821922b544540cd0c2b929cd32c608eb4947bda5ee5ada94384e39e11c2a7432fc967ae94213daa3b71696706ee9f768e34a3ef7c4cda43c97dc56be9ee3bbcaa77700edeb11f8ea26e937b7e51c", 0xb1}, {&(0x7f0000001000)="d86c6231f72ca1ec7543d7f82256697a9fa8e66b014f520758c25b5737d7c6914914929a7634e96f26a1cee089eb452761b56d84bf40822658", 0x39}, {&(0x7f0000001040)="611bd8ce669323e51c9aca743c7d13cc4ea00cea4fa114d0f01d123ad303562586e042a400cf5c513e329016d453ea3d550eca86e0f9e3eadd41ab61ec7a20", 0x3f}, {&(0x7f0000001080)="186ae5e88be59a797d5fb695b7c9d38f2ba23414f4496eddfb88c4817420f8d2977b92dd9b3da6802e774c155d2d6210f67554ad5cb1fbcb90eb4dbda8ac8bc3482f3bdc085bda72b23971312855", 0x4e}, {&(0x7f0000001100)="cf2c20abc39e96521f6306f4b9e1b153ac1e998455e1d1627b3527fb43b3e608206153510625a017ad6f3e37008153c8cc031f3b62c81652c6483b4f57e3e28fe8", 0x41}, {&(0x7f0000001180)="fa841e2131f8a82b1d8317be1f64e1809c59c486327bac35ffe92979a836f264079be318433ac61c60ade824d69e679c9f2ee0c74bb96e672340d9bb81ddd71ef39739b6d1a35e52f00609db217c9c22482138f5d65dad14a9533790bf2d9425064504df75ce16d343669de40955b5becba372f80e03ee3be8428540e28fa24e44f931ad", 0x84}], 0xa, 0x0, 0x0, 0x40}, {&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001380), 0x0, 0x0, 0x0, 0x4000}, {&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001440)="76f5600aee6a", 0x6}, {&(0x7f0000001480)="a910cf2234d8c40d2047401d76ca7633ac3730169ed5f624d753a4d992c7686994a2e2ed8217bcfff23f35277a88de42091e9e67706e03", 0x37}, {&(0x7f00000014c0)="424604aaca6afcd5e2efb964906e98d90cf0156e1560ce2bd7a5932fded519566f6bdac45591b614549a4d249477fd7c9cc8ec1a1ff7510cc4e72eb632abd77bf599f864ff1b788f9cd78c53ad971806b18371538458421393ee3f09152038262b157a57754770847bca62082497733f4e99b9044c8019c9dad3bf2e9c3b2e7406169cf75c2fabc546bfc23a7e0b259851fa5b2e9d041b53a775b2876bdec4a6ead152a9a8db4a540c85ed8974e410ad55b2609ab9f8fb8690c057c4e9ff3e6cfe1d6f8c716d15d000ecea0cbd4821574d850f89dd034f13f5b7ad1a733d8a80fdd6d53f9d065e4e6b440be843d4", 0xee}, {&(0x7f00000015c0)="254eb2c03a000f35c089bfbd3c2e6a8b4a84a7ebee397f73", 0x18}, {&(0x7f0000001600)="6acf60023b00efb1358eb22b11bff7153e0221d24a3d186b1800a29e58f75057cd74", 0x22}], 0x5, 0x0, 0x0, 0x40000}], 0x5, 0x40000) 15:43:51 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 15:43:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e00000000002000120008000100736974001400020008001400080000000800", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:51 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000001600)={0x4, 0x4, 0x4, 0x4000, 0x5, {0x77359400}, {0x2, 0x8, 0x7, 0x80, 0x40, 0x0, "adee00b1"}, 0x10001, 0x1, @userptr, 0x9, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001680)={[0x3, 0x401, 0x4, 0x7fffffff, 0xf148, 0x3f, 0xe13, 0xc0000, 0x80, 0x1, 0x4, 0x2d3e, 0x43, 0x127, 0x2, 0x6, 0x342f, 0x9, 0x0, 0x100, 0x1, 0xff, 0x2, 0x7, 0x4, 0x1, 0x31, 0x69b7, 0xbf84, 0x6, 0x9b, 0xdec7, 0x7, 0x101, 0x9, 0x3, 0x7, 0x4000000, 0x2, 0x4, 0xffffffff, 0x4, 0xeee9, 0x1f, 0x1, 0x4ae, 0x4, 0x7, 0x7, 0x8, 0x1, 0x7f, 0x2, 0x80000001, 0x674, 0x6b, 0x4, 0x80, 0x3, 0x5, 0xfffff9ad, 0x7fff, 0x3f, 0x7, 0x5, 0x101, 0x302a, 0x3ff, 0x7, 0x8, 0x37, 0xc040, 0x81, 0xda, 0x0, 0x401, 0x7fff, 0x4bdc3e44, 0x1, 0x7fff, 0x7, 0x7fff, 0x2, 0x8, 0x20, 0x7929, 0xe3, 0x10000, 0x5, 0xecc2, 0x3e5b, 0x4, 0x8, 0x75f8, 0x0, 0xcc7, 0x0, 0x7fff, 0x2, 0x7, 0x10000, 0x8, 0x7fffffff, 0x5, 0x9, 0x8, 0x8, 0xfffffffa, 0x200, 0x5, 0xa8, 0x2, 0x7fff, 0xffffffff, 0x6, 0x7fffffff, 0x1, 0x1000, 0x4, 0x4, 0x7fff, 0x3, 0x200, 0x3, 0x2, 0x6, 0x80000001, 0x3, 0x80000000, 0x7ff, 0x1cf85c97, 0x7, 0x1154, 0x2, 0x7, 0x0, 0x2, 0x1, 0x200, 0x9, 0x6, 0xffffffc0, 0x9, 0x6, 0x2b3, 0xffffffff, 0x6, 0x3, 0x1ff, 0xffff3bf4, 0x5, 0x1, 0x3, 0x6b, 0x7, 0x70e, 0x2f86, 0x3d58fb81, 0x1ff, 0x4, 0x7, 0x8, 0x80000001, 0x7, 0x3ff, 0x2, 0x2469, 0x800, 0xf, 0x4, 0x1, 0x43, 0x3, 0x101, 0x7, 0x18b, 0x8, 0xfffffff9, 0xfff, 0x5, 0x9, 0x6a6806f7, 0x80000000, 0x1, 0x6, 0x20, 0x7fffffff, 0x8, 0x7f, 0x41, 0x7, 0x6, 0x101, 0xa8c, 0x8001, 0x3, 0x1000, 0xff, 0x65, 0xde, 0x3, 0x9, 0x4, 0x4, 0x80000000, 0xf9a6, 0xff, 0x0, 0x6, 0x0, 0x1, 0xfffff191, 0x80, 0xc0000000, 0x5, 0x6, 0x4, 0x80000001, 0x9, 0x400, 0x20, 0x4, 0x9, 0x6, 0xfd, 0x6, 0x8000, 0x0, 0x7, 0x1, 0x7f, 0x90, 0x54, 0x4a, 0x3ff, 0x7ff, 0x6, 0x3ff, 0x5, 0x2, 0x2, 0x5, 0x80000001, 0x6bf, 0xfff, 0x5, 0x0, 0x1000, 0x1, 0x7, 0x4, 0x5, 0x80000000, 0x4, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffffff, 0x1, 0x1, 0x1, 0x63db, 0x8001, 0x2, 0x1, 0x7fffffff, 0x800, 0xaed, 0x0, 0x3ff, 0x9, 0xda2, 0xff, 0x7fffffff, 0x3, 0x7fffffff, 0x8, 0x2, 0x6, 0x9, 0x4, 0x9, 0x7, 0x7ff, 0x80, 0x2, 0x1, 0x4, 0x3, 0x6b, 0x9, 0x3, 0x20, 0x375, 0x3, 0x3, 0x3f, 0x3ff, 0x3, 0x6, 0x8, 0xd6c, 0xfffeffff, 0x800, 0x9, 0x5, 0x40, 0x8, 0x6f, 0x1ff, 0x7, 0x4, 0x6, 0x7, 0xffffff81, 0x200, 0x5, 0x0, 0x100, 0x81, 0x10000, 0x2, 0x3a1f9d17, 0x4, 0x3f, 0x3f, 0x8, 0x1ff, 0x9, 0x0, 0xff, 0x9, 0xb41, 0x9, 0x7, 0x0, 0xd, 0x2, 0x10000, 0x80000000, 0x7, 0x0, 0x4, 0x40, 0x101, 0x7f, 0xfffffffd, 0x0, 0xa3, 0x1, 0x3, 0xfff, 0x3, 0x3, 0x8, 0x0, 0x635, 0x7fff, 0x101, 0x68e0e6b4, 0x1, 0x0, 0x9000, 0x101, 0x7fffffff, 0x40, 0xfffffffe, 0x4, 0x1400000, 0x3ff, 0x1, 0xffffffff, 0x4, 0x3, 0x6, 0x6, 0x3, 0x1c4, 0xffff, 0x1, 0x9, 0x7ff, 0x20, 0x9, 0x0, 0xcae, 0xffffffc1, 0x7, 0x400, 0x1, 0x7f, 0x3, 0x7, 0xffff, 0x1, 0xfffffffe, 0x9, 0x1ff, 0x7f, 0x4, 0x5, 0x2, 0x0, 0x9, 0x5, 0x20, 0x8, 0x3, 0x3, 0x1f, 0x1, 0xcc, 0x100, 0x3, 0x7ff, 0x2, 0x1, 0x1, 0x400, 0x7, 0x3, 0x8, 0x8, 0x3, 0x2, 0x7, 0xffffffb1, 0xffff, 0x0, 0xea, 0x4, 0x2, 0x7, 0x8, 0x7, 0x7, 0x2, 0x2ff, 0x0, 0x3ff, 0x2, 0x1ff, 0x8001, 0xfffffffc, 0x1, 0x10000, 0x2, 0x3, 0x2c2, 0x5, 0x3, 0x979, 0xc9, 0xfff, 0x7, 0x2, 0x9, 0x8, 0x0, 0x1c, 0x101, 0x6, 0x3, 0xff, 0x80, 0xc47, 0x6, 0x6, 0x550954f0, 0x9, 0x8, 0xfffffffc, 0x1659, 0x400, 0x4, 0x0, 0x10000, 0xffff6afe, 0x10001, 0x86a, 0x4, 0x1, 0xe893, 0x6, 0x3, 0xffff, 0x6, 0x5, 0x3f, 0x1, 0x0, 0xffff, 0x3, 0x9450, 0x81, 0x7, 0x2, 0x48e07fa3, 0xfa0f, 0x40, 0x1, 0x0, 0x80000001, 0x1, 0x10001, 0x7, 0x28, 0x1626, 0x20, 0x3a75, 0x7, 0x7f, 0x1ff, 0x101, 0x400, 0x0, 0x8000, 0x9, 0x13c, 0x6, 0x0, 0x7, 0x40, 0xffffffff, 0x7, 0x1, 0x0, 0xc5, 0x9, 0x20, 0xfffffff8, 0x1, 0x1f, 0x40, 0x7, 0x8, 0x7, 0x7, 0x0, 0x1, 0x101, 0x3, 0xb2d4, 0x1, 0x1000, 0x3, 0x3, 0x4, 0x0, 0x3ff, 0x101, 0xb17, 0x9, 0xd66, 0x4, 0x7, 0xffffffff, 0x7b6, 0x2b0b, 0xffffffff, 0x0, 0x5, 0x6, 0x4, 0xf880b0e, 0x8, 0x7, 0xfffffff8, 0x6, 0x20, 0xffffffff, 0x17, 0x7fffffff, 0xffffffff, 0x2, 0xfffffeff, 0xa57, 0x101, 0x2, 0x1, 0x8000, 0x1, 0x0, 0x200, 0x8, 0x1f, 0x80000000, 0x80, 0x8, 0x7, 0xff, 0x4, 0x4, 0xff, 0xfffffffd, 0x2, 0x8001, 0x8, 0x4, 0x101, 0x1, 0x7f, 0x7fff, 0x2, 0x4, 0x48e, 0x3, 0x84, 0x6, 0xd2d, 0x2, 0x400, 0x6, 0x101, 0x7ff, 0x7, 0xfa, 0x8000, 0xf67, 0x0, 0x9, 0x7fffffff, 0x6fc5, 0xffffffff, 0x100, 0x9, 0x9, 0xc9, 0xd0, 0x5, 0x80, 0x1b, 0x7, 0x8, 0x7fffffff, 0x9, 0x80, 0x5, 0x3, 0x4, 0xc0000000, 0x2, 0x7f, 0x1ff, 0x7, 0x1000, 0x8, 0x10001, 0x3db, 0x5, 0x7ff, 0xffffd691, 0x4, 0x2, 0x5, 0x1, 0x8001, 0x9, 0x8001, 0x3, 0x5fc3, 0x7, 0x10000, 0x1, 0x80000000, 0x10001, 0xfffffffa, 0x200, 0x0, 0x9, 0x4508, 0xd0, 0x0, 0x9ad0, 0x0, 0xc2, 0x9b74, 0x90, 0x5, 0x5f5f, 0x6, 0x400, 0x0, 0x9, 0x5ac, 0x7, 0x3, 0x8, 0x9, 0x5, 0x1000, 0x49f, 0x7, 0x81, 0x8, 0xfffffc5e, 0x8, 0x5, 0x8, 0x8001, 0x5, 0xfffff000, 0x8000, 0x9, 0x436b, 0x40e, 0x9, 0x2, 0x2, 0xfffff678, 0x1, 0x6, 0x10000, 0x4, 0x1, 0x7fffffff, 0x8, 0x4484, 0x1, 0x5, 0x0, 0x48ce4978, 0x80000000, 0x5, 0xc3a, 0x9, 0x9e2a, 0x7f, 0x3fb, 0xfffffffe, 0xf8, 0x1, 0x0, 0xe2dd, 0x7, 0x7fffffff, 0x9, 0x3, 0x2, 0x7, 0x7, 0x83, 0x5e, 0x5, 0xe9, 0x53c8, 0xfffffff9, 0x5, 0x9, 0x7fffffff, 0x4, 0x0, 0x8, 0x3, 0x1, 0x6, 0xf8, 0x7fff, 0x0, 0x800, 0x2, 0xff, 0xffffffff, 0x6, 0x3, 0x8, 0x8a93, 0x9, 0x2, 0x7d, 0xf9, 0x2a0, 0x0, 0x7f00000, 0xe5, 0x4, 0x8, 0x2, 0x1, 0x3f, 0xffff8000, 0x8, 0x9, 0x5, 0x8000, 0xffff, 0x6, 0xfffffff9, 0xacdc, 0x4c6, 0x3ff, 0xfffff58f, 0x0, 0x7464, 0x0, 0x7fffffff, 0x7ff, 0x6f, 0x8, 0x19a, 0x401, 0x0, 0xc98, 0x7f, 0x3, 0x5, 0x1, 0xffff, 0x1f, 0x101, 0x80000000, 0x1, 0x6, 0x2bc9, 0x9, 0x6, 0x1000000, 0x7f, 0x2, 0x8, 0x81, 0xdd7, 0x1000, 0x80000001, 0x0, 0x5, 0x6, 0xffff8001, 0xffffffff, 0xbaea, 0x1, 0x3, 0x2, 0x2, 0x1, 0x80000001, 0x6, 0x2, 0x10000, 0x776, 0x8, 0x8, 0x0, 0xff, 0x2, 0x3, 0x2, 0x0, 0x7f, 0x7, 0xffffffff, 0x80000001, 0x1, 0x800, 0x1, 0x48b, 0xc5e69890, 0x6, 0x4, 0xd69c, 0xffffffff, 0x2ccd, 0x1, 0x4, 0x8c, 0xff, 0x2, 0x7ff, 0x5, 0x1, 0x4, 0x1400000, 0x3ff, 0x2, 0x2, 0x9d, 0x7, 0xd40, 0xd0f, 0xb7b, 0x3ff, 0x7, 0x1, 0x6, 0x4, 0xf7, 0x0, 0x8, 0xff, 0x94, 0x9, 0xfffffffd, 0x10001, 0x0, 0x1f, 0x2, 0x5, 0x100, 0x1, 0x7, 0x75, 0x101, 0x0, 0x6, 0x8, 0x78, 0x1, 0x400, 0x8, 0x4a3, 0x7f, 0x7fff, 0x6, 0x0, 0x5133, 0x3ff, 0x1, 0x2, 0x20, 0x8, 0x1ff, 0xff, 0x3, 0xfffffffe, 0x400, 0x5, 0x7, 0x20, 0x7, 0x80000001, 0x3, 0x5, 0x6, 0x8, 0x200, 0x5, 0x6, 0xfffffff8, 0x2, 0xce, 0x7, 0x3, 0x4, 0x7, 0x5, 0x95, 0x10001, 0x7ff, 0xfffffff9, 0x10001, 0x40, 0xfff, 0x3, 0x3ff, 0x9, 0x96d, 0x200, 0xffffffff, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x7, 0x6, 0x3f, 0x8, 0x80, 0x10000, 0x63aa, 0x100, 0x8, 0x6, 0x9, 0x0, 0xd2b7, 0x5, 0x1, 0xffffffff, 0xfffffff7, 0x20, 0xc06, 0x4d, 0xe57, 0x6, 0x0, 0x7, 0x8001, 0x3, 0xc0e, 0x40, 0x7, 0x81, 0x8, 0xfffffffb, 0x101, 0x2, 0x5, 0x0, 0x7, 0x8, 0x400, 0x5616, 0x5, 0xcf0, 0x6, 0x2, 0x9, 0x6, 0x9, 0x910, 0x5, 0x3, 0x3ff, 0x7ff, 0x81, 0x2, 0x6, 0x7, 0x1, 0x40, 0x8]}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2001, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000180)) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={r8, 0x9, 0x6}, &(0x7f0000000100)=0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000380)=[0x80, 0x654]) sendmmsg(r7, &(0x7f0000001580)=[{{&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x20000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="e98d924841320c1dff9ac9779daef42b8c86bcd60a83b66326e3134cadadccfbbd7f2424a7046cc06c4654330173eda3d40a9b622a8c45583a520edd01357141504dfb94b2709feed64d0911d5270a12ada806e82aed543fa6cb76f7de2f339f", 0x60}, {&(0x7f00000001c0)="5d7399f4f610eaa07af94a9a09577d73b0e6133c8c498f482dd4fe010f0415dc", 0x20}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1100}}, {{&(0x7f0000001500)=@isdn={0x22, 0x5, 0x8, 0x80, 0x7}, 0x80, &(0x7f0000000380)}}], 0x2, 0x40) 15:43:52 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 15:43:52 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e00000000002000120008000100736974001400020008001400080000000800", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:52 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e0000000000200012000800010073697400140002000800140008000000080002", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:52 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) socket$inet6(0xa, 0x6, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:52 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 15:43:52 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e0000000000200012000800010073697400140002000800140008000000080002", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:52 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/29) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:52 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e0000000000200012000800010073697400140002000800140008000000080002", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000046000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:54 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:54 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:54 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x5) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x80, @mcast2}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40090) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x15, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x8000000000000002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x8f, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000001240)={r3, 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000200)=""/4128, 0x1020}, {&(0x7f0000002a00)=""/4096, 0x5f}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0xfe000}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x196, 0x0, 0x0, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000000)) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15:43:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/144, 0x90}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r5, 0x40045109, 0x7ffffffff000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000004c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ftruncate(r3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={r10, @local, @empty}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f00000008c0)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/171, 0xab}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 593.136550][T26358] IPVS: ftp: loaded support on port[0] = 21 15:43:54 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 593.184605][T26357] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:43:54 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8501, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) listen(r2, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:54 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/29) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:54 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:54 executing program 5 (fault-call:6 fault-nth:0): r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 593.592511][T11979] tipc: TX() has been purged, node left! 15:43:55 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0x102, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 15:43:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x39) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000df4fedd2c900"/69], @ANYBLOB="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"], 0x4a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000000)={0x4, 0x8188, 0x1000, 0x1, 0x5, 0xfffffffc, 0x1, 0x7, 0x4}) 15:43:55 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0xffffffff) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:55 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f00000000c0)) [ 594.248763][T26501] IPVS: ftp: loaded support on port[0] = 21 15:43:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="c3da", 0x2, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="cb", 0x19fff}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="580002000206000000000100000000000e000001050019000700000005000100070000000c006973743a736574000000000900020073797a30000000000c000300686173683a697000"/88], 0x1}}, 0x24028051) recvfrom$phonet(r0, &(0x7f0000000140)=""/131, 0x83, 0x0, 0x0, 0x0) close(r0) 15:43:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 594.345352][T26505] x_tables: duplicate underflow at hook 2 15:43:55 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:55 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x3}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/144) 15:43:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140009d57d939bc661cc1a9a2f240f3e0973176a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="736563757269747900000000000000000000000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003e6ff03000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) ftruncate(r5, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f0000000200)=0x10, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) sendfile(r7, r8, &(0x7f0000000240)=0x9, 0x5) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000080)) write$USERIO_CMD_REGISTER(r3, &(0x7f00000002c0)={0x0, 0x80}, 0x2) 15:43:56 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 595.005845][T26636] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 595.050418][T26636] device macvlan3 entered promiscuous mode [ 595.087379][T26599] IPVS: ftp: loaded support on port[0] = 21 [ 595.299335][T26686] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 595.316270][T26686] device macvlan3 entered promiscuous mode 15:43:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x305100, 0x0) dup(r3) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x398, 0x1e0, 0xd8, 0x1e0, 0x1e0, 0x0, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x1, 0x2}, {0x3, 0x1, 0x6}, 0x9, 0x6385}}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d2, 0x4d2], 0x4, 0xfc, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x3, 0x3}}}, {{@ipv6={@loopback, @rand_addr="66938c27c4fd4b044ff93e8613cc59d3", [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0xffff00, 0xffffffff, 0xffffffff], 'bond0\x00', 'bond0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x4}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1f, 0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 15:43:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b700000001edffffbfa30000000000000703000028feffff620af0fff8ffffff71a4f0ff000000000f040000000000007e400300000000006504000001ed00006e000000000000006c440000000000007b0a00fe000000003c00000000000000b7000000000000009500000000000000023bc001b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd6e86ca5f8f3fdadafa0ef01b6bf01c8e8b1b5e4fef3bef7054809000000c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2e3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc7aa4d8e30fe021397466aaa7f6df74a61265d6e0252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d679dff67b6cca26e71ed816a39bcbac72f53aae03b28fe7c626ea499df64928492068e4567cb1559293c55de75f98c28686470c095a8b8df9dbf3a755c0312f0cade306604f189865936c38fba27b36f000000000000000000000000000054f09489513644e31502ebb05ea8ef92309554ab2ce89344836c32b93414da8450643d2fd0a18f782192cbb160a4c9a4cb80665250f7f29a8c7f93d14726f466fadf97f235794c30654857a7c2d7ef5ad4f52ed68c558017"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xeeba}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000040}, 0x14008804) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000240)=0x1) close(r1) ftruncate(r1, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') 15:43:56 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x68) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000, 0x79, {0x0, 0x2710}, {0x3, 0x2, 0xff, 0x22, 0x8, 0x7, "5bd058bb"}, 0x9, 0x2, @fd, 0x8000, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) sendmmsg$sock(r5, &(0x7f0000003400)=[{{&(0x7f0000000140)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)="c7a8f14a906a9de6cde47a01105e524ebbd188a205", 0x15}, {&(0x7f00000001c0)="c3721ef37a60072981e96382c93ebd7b470d0733b40ffccc27bf1d47a239b42afe89ce52ba50c0c2a7c509eb0461cda522082ea505c11a81515b2c02ac1e67f8041ca6f4034bfc43ef5109ba466361ffa9eb987cd3", 0x55}], 0x2}}, {{&(0x7f0000000280)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="8f6557f6cb39bb7dd302d3232dd8d0da2f1e0c3547c4f3c70739d1dd2cb5e36d29ba1709eabaebcbc4042a38e167f8a0d88fbe6168db8c45c532e0b1baea47e2e88fc53d8e4dd82abde98a834bc07b16291421b6122bbcef975ceefb67", 0x5d}, {&(0x7f00000003c0)="8f441d3eac3a4ad8d65ef01d3a3d7e5aab99fd59a13526cca2f1d6f8735c5369fdfc8a2a86922c31cf98b6abb7145db3ae09de230c40b56bde920631ebb719b89be12c0f288ddb3c2ef5", 0x4a}, {&(0x7f0000000440)="0f1c6cbf0f12cbb023b006b5660beabc66fb0ac4e9", 0x15}, {&(0x7f0000000480)="1a31dcc7", 0x4}, {&(0x7f00000004c0)="1fa78c58d45a3a8158a6a380a8cd89a66618717722aee6028bf971f91b2a8a4d3be8fc811f0bd51c67cef583836bb4bef6df201a47bffd3652b466f2bfc32ca3b92d39550b1a0ad953477efac69fd01831742573a29f103858fe9a036298937b7762d1c6041a132c77f933168c92b65a782453f0aaab45cc5956e56a6f951a0cd3b7f7dcee570a78cb636220eb31af7b262fd2d2c3184fcbba9736237773cf9e132baafd205e3c93a8467f1519d8475d6050b5bdfb3bcfd367e9", 0xba}, {&(0x7f0000000580)="ba9b57d207e1a737cd7bec2ad9bc0f92be67ebf35e53aee4251fb5f438f06fe286bbb45c537850d9cab3bbfa4b7de27c00dd42cd01c3edf8dc23bfb3b53279804923e586529d957077775faabbcc9a095e64d46211e34fbb367002294af133eb46b4578ae11981d675fca1d4139c77308f804ec05adb77e126345605ca51bfc140e7fcccfe12d42a438c24f56ffc092c74ee2b2d8880f3a5ccdcb29e5d32825b9344f320601a2b35bc206193", 0xac}], 0x6}}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x3ff, @mcast2, 0x1}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)}, {&(0x7f0000000900)="47d9c6f3a6cebb9f6b483f59dab83534f90b4994e466d25ca7e9281ffcc03379d65e33d9789313c97021511311d61a93de74c3ab0d7929d097f60c8bede43c1ef3b127fda419062dc33ff4656f71c357e7aa6143ab1c8a6364ba166980fa53673851f952", 0x64}, {&(0x7f0000000780)="6504c8d52c85", 0x6}, {&(0x7f0000000980)="418e95aaa229e4fc28597fe324302ab42a04c8a024b410230c4ec2666d40767f88d8b643649912ab9592f77dfc844c86957d402f9a88b9d1fc0f1324aa644bc5c97dd1eb2df2186597466a68e3f94b9ee706296a295fb9e71087e733431a2cc99cedddf555b3c18998f08f8aad5ec609db3fd0911bb47b6e39c036c8839dee11cd61cdc969159a06f0bd42bec7db104217efd0b6390068ff03c30517788bb36ecd1c3f38339e57c8b5adc9681397815f4adeb3dea8371ae2c05f5adf23f832f676866a0116dfcb5eceb0bb786f1e1c3d", 0xd0}, {&(0x7f0000000a80)="cc1c8afc5991c257c9f73a24afe1ba39bd9c4617bcde59c99dd6141a60ca6fe0eb3664747ebd01ad6828e0bef7bee14fcba0a2d39ab3ee069a415cf3467db441d994b0a4fffec071273a66e61e413f9863903f81072e695a502e4802306bbfcadfdc89abc7c16fb78799c7228f8498d0e96bd33699ef51604d6cfcfceee9600d7775f982f4a2c905f2a74fdf24a0cda4e7472887c4fa5fa1b8097425c65f0d7c2d9ca6a30dbdcf1e", 0xa8}, {&(0x7f0000000b40)="99c814354536cbf80f6cc850eaa733f3e69d4f39a29fdc5e7b087bd0fa24fa30a1643319d47d1549f6fa708bf1c9d1160d144e507e7e8662fcf9e4cc63a4cff5a844b487a526771b059811b69d8bed7d61697bc567c28265ddcc09cadb9db19e1a75b9ee7fd7a84bd2c8eea2f08a6a459f6c89a7aee08b57e683051eb3a4550c", 0x80}], 0x6}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="09c01b68e620aa285b5a9456f1bac85fb36b44bc040218705befd1ba41604f52bd803bf60a4b5f0b7684dacf683c3d7d966c454723cecac2f2a0eadacc0375fc66ed0f81d7d93881ed2f5ae07dea1da07138", 0x52}, {&(0x7f0000000cc0)="7de58f4dcd3e7c7f0ab0a059f5aa4d22ac2a22d2030928696dc89b574c9413bcc50ff97ff4ae9e1550e0c6af52389fb54c1acb9c072f465465e0be84ca0c7cdc75950b7eb8b01b2025cf92f5c4134fe638dd1e46ce886b5c83fddcce31068258be34e4fde0aa012b46d43147ec95ea7356100395ff84838418c1dbf28a3f58487e2029dc8e2fcb498ed1d71c6bce894c89a378c1e0316589a4b9d8104bd68bf4b969161eb36c88c9dfe17ee31f9b31ce87c63bd66c93f31ef2acfb6ceb807bc2c543a25a", 0xc4}], 0x2, &(0x7f0000000e00)=[@txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0x18}}, {{&(0x7f0000000e40)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x400000}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000ec0)="429a2f2666950925d98394534b9e10c0a5dfdd526b59bab73ad970e5aa102e3f01183fe4ed3c30498ac0740ceb29685fbf4282934af3be589f604559f36abf49e69109f04449c1ccfe081d5f7afd6e0cf458fbaf5f6e68f42c6a717713a8573ce5e1ed2b8bc7173ed0b3f51db95ddc2ae192086ca21028989ac814e967dc55d8df2dfd6a6f560f43ca2664932b662311c7a909c33fb77e58e37bd554aa6408baa6919c5e13b9c9bae4b9eb5f529043efb114107add686de96b305325e79e847084d31a26144a3a07ba03ce0abc617dbd8a7f2332", 0xd4}, {&(0x7f0000000fc0)="4765447bdc0468", 0x7}, {&(0x7f0000001000)="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", 0x1000}], 0x3, &(0x7f0000002040)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xe00}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x400}}], 0x90}}, {{&(0x7f0000002100)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002180)="ddb5f3fd510eb70881483fc06fffbfa1b3545a6c478704591b1c3b92c2ec95323628e9c5a2c28e9a736b796364f089076c7f19a02bb5dafc12f0edf92b9fddd8d04a696ee146a253f23b8bdcd51eda220cffbb6b39b193be43e56eb89da756949155419d21a2ee8d0dc05e51b5fd9e30e9038053316e5dfc5dbcc86616a7f62882b8ab5a9620a223a312", 0x8a}, {&(0x7f0000002240)="512446b3e9745d160ecde2aa47f1f6c714548f1bfd7170a06c1c29d60c57e401866e77090fc2efe63466d3288c3be183c3cc8bca2cb7b70d589688a53e9444f92b9a86a05d4734301d40b3d2d765cecd34577b5d8e882b62c7bc69f2a743c6e984ecf4e2d4267bfe6f8da5d8259fcb330e6090d7c76324e4dd5c3776045adb906c2105591a17e4fb77eff83d1b80584c240d04fe8801909cef24eaf75f488f89efa6726fa4c712fd5c04b6d1d6ab53e538d6978bfbe43252fe62e36c3ddc536c89440b", 0xc3}, {&(0x7f0000002340)="128c61f91e309de66390f68de59e5cdab0831784cc55b0336c4a4ed5aa20aa101fdca4965cd963055088f0e773b600f94cdaacc4524e6df570ac1e616a42d553f29cfd2d7868b4a16416a71c13d9365129b89bfce0542b6ddcab8f25b19eda0ab2d5c748e5ab043ef78516fe0a5d69e800a143", 0x73}, {&(0x7f00000023c0)="a768e5b1c40178802bac66b90774ec5a0efea36b94999322dc5bad701ffe7e9b8e3db22d46eb5ef7bfcac3dc6690b3ca4971d95ac03834bd88d967e5d4853117151b6966fed5137b3eab340624efb83b8f23acd649ea5812fd84fa896c1e4f497cf85f16e6879cf6e8f24ea48e895e2157eaa76c414fd040e6467a69f53d7cfb4eaf957336cdf87aef7fbcba69a350be22c81fb46b1421c18d0ec52044697a666f5d566350984139f9c9223888709fe99142f659df800bd3096fb2e16b3e09c852c6694011f753f2cfa02501b5a8d6423b66210f8af732b4ac4334383e511fb4f4917783f0c9291394a28ada4b5a3fc6c3e40a840124b607df772b55c35455a50a56f3f52346e80eddbc1a6efe4058898b0e7f8da8ed84302c8643865b2a18fef678c2f48fda4c7d973a71bb3e01a8c68c8505c781d6075c69306b30f88f67c0222d735fc93842437f77bf9b4ca7aebe52f69f2c3389a03f33f5b88c9dad95f7d0d41cd871cf8ab55931b517c91ff027ae4bc6936e62e52b7e13551561f87c05651ed32c583631a4666144e9f79b16a19b19e3a4d4c6a5bfde14649a16a01a5519fe588cd5706d3bd871093d0f3da696e6c8aa7a705496ca3b8965125c7267fe3220cce5ff52f0b09b1c6c0ee52110e073a6aca217a8834ed702f223649915141f8ed3ab5495904328bed095315c81bd9b57226d10d66885ed4526a25e18aff0f92f2e5859ac446017fe54cfec202eb9aa5adee4dc97fde8082a97c632508ec57ffbbb9dee122f59831e2240b3d493cda05b8f6911a3b483cec0f20db81e56d433693094ec3375e2661b063278de3b6bfe19b38a5ed495ab2c80180296196a562638a8632eab0acbec99aec0018908a3f57440b17104f2671107a2d51648bb7f6560780d7fcc5aa5f642f0bba614c3c5773f7993648df3b97dce47196e28b22bbd0480e17ae742e36b131a8889cfdbaa78c5d4a1762e836ac0d2fa765b5f86238e45df90020d4b7fbd892ef49bbb94bfe8d98d0d34d092d6f61586624c621d5e8f0919e3700f2372ce93bc5cc7b55738dd3e423ebf75561d52eede15feacc2f11bf1ba7305520f614f107dae12fd014132ef880ed965804ed0cae0c00ef5e88180149bf0db2f89cd892e2c4c6e0993c92ca10a459420c7db9db8576091d389885e17de7f333ab64825589b3e68f7e419b93dee31b9a23a555a9271ca87ce8346c2f20ed6d146e3736846ef1742eea3f564a5c55050b2db36512f1f0aeb1a87fe1cb868d08bbd8289a183c2e0d7bf0e47046a27fae48629c3d56172e84b0dd4e5f2ea9e42cba7d173303d6a93c11de705225c30b36b1a2775d9239fb7351ec7ac7e959d457101e4dd9c76eac4964c86346e55d94df2e739c993129f8fec17c0f9ddbc06e5436575f9383bff7dfd6304b87773aeeda915cf0286322dd3fce20a703635ca18af2cb12f8e5c2bee52a542a9bac56c2bc89c1c4bebb522d9217afc3361ffd48861c9161c6b3dd8c6e21ed65c272db6b2995f7e61cf7c5290e5841eb358004c5eda2464ef9a6e4e88bc139024df8185ef559bc0a48e4cfbf95618e7de49e89647defe035254ae625deab5872ea0a0d6ea6ece2feb9eff0d2168d1b422f11f43b4637f0c5f55746fd3df7ee7275aab217a733f41504993917aff2d9341b134ff142d596890dfdb93ebc78678d2fea674fd166152fdf3494000ad2c730d3ecac05e5e75e6130e87e4a1403ec1bd20be460e4a6368f5e43e4b000c51cbec95e762581a4c8c2f0c83cd45a3afdc383856506b73371ef3c77f556ea6b08ec1bcf85428d5ebf93a15a1bbb7a2d88c82360bd741463297720289d2874dd9c9d1ef99556e39131cd9d519a9be94b539e50dee0c0859f3a00d31f19f2528ff7d6666411026c1bdd24cf58bd81a453dbcfbf19a3e0bd43142b7de78834d357f04ab169af48b4265fc10b40bfa0ef758591acdd2f66fad5e4cd41c346f7053d23708433c91b21af89bb819ca4c7b2bfc9ae0c3fc65d8d52a5ba918acd401a66806453f392b55b42a8866a9e4d2f972e4464d7e9f66b8b768aec32250a51bba4bcd3bc50d7d4543f9d5bb44e36083ee5022d8b3031b10113aab38432e92cfbbc83cde75898ed2cccdec0a78a71e22bf1b99d056bde247df431061917f6c19527895cf23d7981c1244aa4f303212168b8db5b11eecabbf43fc61d25eb559f1d56a850a17d35048432a0f33e8ec4e69d3d40e3827c8e6485672ddafec75a996d555af16a114d4506eceedd849316e9d882cb7f4d9142fb93b91bf597f225fd5fc4fadf231bcb3ee378560d1130966d6f27828bf7083c5bc285eb1e8c5d7e51c88f38cba1aa15a5839c47ab811f5fa518f292e5f35f9ee2a1298596b356b5a31004aaff2e00f5b40fc3a1af51766349114368de6c7c52881f175ce16b3a5de28115ac2903515e745b6babb027284ad8fd142796ddc9cf8eb1473e573ba5104c954a27313f8f7b87e901d9a00acb301714ea2f0978a970302110d1e369d09221d50535c4a0555d110a048d3ef3d246a33a0cb4b947597d4af7d65429e987032bf43ff9bf37cde4b0a3529106f5942569a2f9727a5c95de29bacac1ff47134ed5aba9fc0a3208a210195e2a2e933babb4c46b28ee86df17f48878dc1b5589e9f144d17ee74ed2e3c04a534cbd4fb3ada02ae88d2e3fd09fef920cff7635ae691b4b0bc491758c6f1fecf443887016f957ad2c2d899a926aab34bd9d1aca9b11b23500c8f95a14520b0e8e4e54ef70e85a06fbc45a18d1f1b2f713ff1f86e9bb36a1019e1a480bb506ae7ee858322aeb3d5806a758f622c8495a4038fd837e1f50162084abda96d4e12e3b02bff3d06cd30c5ee83360f5dcf8da9ecc6b2ad81b4a7da55e830d0b6edb82d9a74c81b7002940197a1dbe96c0d88794e0bf63fe240247e6d0710a1f2dd18a953208681f9f3211065d74ef797ef5c44e061539deb1212626b759d2e582faf6898b6989b9057ac765370176102d10044a54433689fd30ec5dc81b1bf050e918c32ddf1e76ab52ba203c80d6198ee7f0106072a89542baf6c3392eab74e5141243002e04fa84f6489bef470df3f0e4871adf425fcaa056ad081d97aad7e76198239b21ade184ea350080169a9d0ff5c41a73e647156e482f01caf775d400d52b5d2100402d572a6e239d95227467878c998d64a5a08ca3cc80c248f31bd84be591fbba0cd3232852a916880b6989861ab3d1b616b9838cd7a74e164466a9dccc8c3e1de18e112c9dd683baff5f837de2dfcb1276df99813efc327d6f0d1b1c44334517d7aed721167f8dae3ac99def28b8fc6dad786c247c48378cf45b0167f7adfe10e069e5d60b453030034315b41bd86cf54a1bdada700d29e756c3212714818948258d3d373da1070f74894b58bf6ced17662192af82a3df744ecaca223a91176606ddfee5a4693d85c479aeafeed432473143c0309044a6114fa0040a32b139627dfb8f74c1d5e69466c2dc6fea643ee0ab97e2d9cba3f7cee97e6d4a5910d7b399e4b58920ac200ac805c3a2e21ad356bea948a22622c513118194548bd0220d7b9ef829cfea1a6ceb6db71d0982bcc6552e8558392ba2609c5d7488045908b136ff138a789c0156f83619a0f0bb9bc507acc4c23e3bf0cbc6b45631eccb380d3d520cf197d64538903756655c7d20c885e70eed419b1b58451fbacc1a2b78e04e1a4b7883647ba882c153ebf6b41918e8fba4637b69d83d3b621ea88dc314feac4a352af3ea1ae88e17abb8bc0540ed36498f852e0e12011ea26ac5fdf17545270563a3b5e018befdcdb09e7040b64144c7ff251c6bc3107b477495297a4dcc0036ce97a5d7461c216cc0185487046ffc7b2c6bc289e0f294c7abe52308435d5756ea9cf9f834cdd878565d6ac9838048dc9fbc5c59dacb8fbd29d5e5f248e851339f814e0569d30702661b6f5b1271d82bf5a521ed81b544c2df5f30a4a45aa7ea18ca68c9423cfd9c533892783f4fd69547328c4383773b091b44fe11bbdbf26ec722e5cbc113302e4be2db7a3fedadba05c9826a2f484478834bf748373daba91f6196582316c1ce95c57febe19f99c1a7132fd18ab01f3cae106834d1faa70a184249ff14d78ccedff17858d59bce45db7417366789f59923fffbf11d189c1d7a95f4abbc4cdabc81838eea5f22bd9329effbed7d0d19ff25b84c6e5196ab3a9e0a6a5c9bd65390fb906d966f87d7db113e94dfce9cef5293d4a9dddf29ed39a26a0cd989658bd0106b52101fa98efa067d30c96c8398a29a90fe723f8a5e47c2442599ef9f452e5d08ba28398a2c21743fd5e426b9831b1ca8dca8cd907d57a0c77b0881f8881122b9c36f855ff28ac3e47e50983bbb5ae6bc497a3bd9349c2e67debc4e5b8cfeac0d6fd1786a853b00fd45badee294c472c7c2fd77ab8ca5e3d5b39cd70aa60b859cceb40e9c6c3101588d38c8cf744656aa2e88ad189ead4c1fbf213882f638dd9ecbf409e9a76bcc567e3abaeb9be2f0cccca05612fdcb47635a6c6f07b15bfe806d1cc9a30faafabc311003f15c9588abbf07ca9d3cf91bbd546795ffde6ddb1c6c55774a925f9e09644289c7387239895382851bc21d060528bfb84cb48b1b4fe9eacb15736ccec0681edaa817f6a60e5cc75546aee2adbc6d59885a4159411ad1a4c374525d6ceeaff8aa6ad6c9c38672f7e449b0fac91a171c0058264333613fd118ca0ba9b363416c0b16b0240655b206ccdca6ed17bddcb32e70a401b84175ccfa74b5d4487ac1a977de18a6d491ffa8b9d9ae24cc4ef2bf8de5e50aefe222d57f4fd7725b05b335521bdd755ab631630ea67674fb6a21cf75b65bd77ef9226dd883bdd5dfd86342a8638c017ddbb087dffc487e8eb2224f5deb09d7d5cc46fc9df3dcf394c9cd79b4a3703497f5c8a44a654c2f0c91145436d5cff26b08979097546ed41c3b8edf17a53c7c8e33514e501e54aaa1d7f8892a16961873b1d2391e5361ad812d3b8039bdd5e87b074106f36722edf2c37c246bb564997a34e8bbfa12e9d8d299a9da66a25977018d79334b6eaee067d73b3bcefdfbd25a311ce28fcc14d2295de9d5b8efaaba27dd4f0efaf5f3be03c03cdad186f6d08f5865d1b04bd6bd6a58874936c7134ea2b6b3a55748cc78186e04b138ccfc65bf9eca3922e5fb225492331979010101a3bc9ae075eca77849c61e452dea3d003f1e25b6b301313a5979bab9fb21114283c8635e370d1fec3dae84b19e2562380eedbd38e25537496bd47d0121f2bf8caf98c9cea81aa9b0c94866a4846aaef5d156a9c730a6a64d7789c9dd13ab1c169c998144b92601aaf3cb5cb7520dde1a1b4a375b27f78a21012012b364b5f986e53062284c1c2ea900eb99aa87fb09d468e8240aaa03022daa33d38025b85aed45293cb359271bf58626f14fda351024937dd2f08dddce3cf9dc29c5030760355bbdc3a1fe51e92ae7521da2127d7ac5fa01b80a146e62b28e7bef1782e97d9ceeec2fcb185f3e7469c7b21fa388106459745b7729b9a62966b866bf1c1f86cfec3296be72e3d0b44c7bbe33719f544462d38da3aa81866aeb8b32296bee0e4355e124f29369ee58f8362ce92aaf32c98409955dd2fce168570f580c8fa6dc36d9fe8667029079f3985e93faf716fdaf7ed27e391e7f9cf4c68c8db8c061e009bc02c9b87db72ba1b799593f937f728b0fcef769c866fbd173570e051aee1f5be5cbc20757606608e3236f60ae7e9dcf532c3cf01c290fb362de554e4e083", 0x1000}], 0x4}}], 0x6, 0x22008040) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) ioctl$KDGETLED(r8, 0x4b31, &(0x7f0000003580)) ftruncate(r7, 0x0) faccessat(r7, &(0x7f0000000740)='./file0\x00', 0x0, 0x1000) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8010, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x7e485f99e515b417) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001400128000000100000000000002800000000000"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00008a61000400fb08000a0010000000"], 0x28}}, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x400, 0x4e24, 0x468, 0x2, 0x80, 0x0, 0x29, r6, r7}, {0x5, 0x3f, 0x9, 0xfff, 0xfffffffffffffc29, 0xfda1, 0x8ba, 0x401}, {0xda0e, 0x9, 0x3d, 0xb1f}, 0x9, 0x6e6bb2, 0x0, 0x1, 0x3, 0x2}, {{@in=@broadcast, 0x4d6, 0x3c}, 0x2, @in=@local, 0x34ff, 0x2, 0x3, 0x6, 0xff, 0xf7d, 0x7}}, 0xe8) setsockopt$inet6_buf(r1, 0x29, 0xd2, &(0x7f0000000400)="167350ffff1a48d5f9a2262e7842a0b91733549348a02288943abcd171313823179fc82c1e2cc6161616ce99a175a3164db3640c1edf0e3ab70639f04f01f0e3206253e528646d47a079748c64d09d046947a5290ebd9ea0db6c2e02820168a3b9f60ed00df0", 0x66) socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x82000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000200), 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendto$inet(r8, &(0x7f0000000180)="c7e8c50f7f88c1b0aef8b4fa", 0xc, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r8, 0x1) [ 595.711597][T26762] x_tables: duplicate underflow at hook 2 [ 595.819056][T26786] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 15:43:56 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:57 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xbb4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:57 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0)={0x2, 0x4}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100)=0x16c, 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 15:43:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0xa8001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000140)=0x204) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'bridge_slave_0\x00', 0x8}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x4, 0x5, 0x0, 0x0, 0x0}) 15:43:57 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:57 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl(r1, 0xb63b, &(0x7f00000003c0)="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") r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7, 0x340) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000000c0)) 15:43:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) getsockopt$inet6_int(r3, 0x29, 0x29, &(0x7f0000000200), &(0x7f0000000240)=0x4) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ftruncate(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x0, 0x59049}, [@IFLA_PROTO_DOWN={0x5, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x4, r8, 0x21, r9}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) ftruncate(r10, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r10, 0x40206417, &(0x7f0000000140)={0x4e, 0x4582, 0x0, 0x1, 0x0, 0x5}) 15:43:57 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x190, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3207}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcbd3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffbd}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffffffc1}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffe0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x783}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040818) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140)=0x8, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') get_mempolicy(0x0, 0x0, 0x0, &(0x7f00005ad000/0x1000)=nil, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)="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", 0x1000) mlock(&(0x7f00004b6000/0x2000)=nil, 0x2000) sendfile(r1, r0, 0x0, 0x7ffff000) [ 596.591058][T26906] binder: 26897:26906 ioctl b63b 200003c0 returned -22 [ 596.667312][T26905] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:57 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', r2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r4, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) ftruncate(r10, 0x0) ioctl$KVM_GET_API_VERSION(r10, 0xae00, 0x0) ftruncate(r9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="740000002400f3a4748635e300db000000040000", @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES32=r5, @ANYRESDEC=0x0], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="0b1aafa168e0d1ee80d1c08ea6c78e52b2b2380767f2c841d9a413181a28d9c7f2053bcc0078428b0450f41176290a7b93753c53805b2e9d50f653f953259c091db56ce8d0f98ebdc48545dd9529117bb31cd32a1586e6f5b3b2f5c44a8afd308ec6719170a163a2281a0e80f708a65f34ec05a23f9338ae643ac4b07295fdd85f70e82ae27d0718915f9f1b722c9aae66bcb68606b518c0ff6563fcd41b8e562d6f7bf1b3", @ANYRES64=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRESHEX=r9, @ANYPTR64]], @ANYBLOB="00000000ffffffffffffffff080001007366710006000500fffff0000010e104deccbbbde735b9a00000000000000000000000000033cc3512c9aa8178bdf1001b00000000000000000000de7f46000000000000007f0000000000009900007cf76567e30e03c32824f1583940ea0e363002e94564838f548258a632963f8262d0485c9b90c19b6ca74fb97882f65eb406eaf163fe648fceb6d85c1a8e44476c248656cb5d845549c5ceffcfeaabfca524afef20c0034fbd36262c964c61f3771603fd386dc70a77e574732bd950e808d63007d6c6683e251ac28f6b621f863aa3d9e240168ef067671514ccb381077c2afecae2bb28925f8dd87c3994ef3645d77e7281ab057d2bef3b8444014c8752a4a8a434ac70810633f2eb7d7a89d0f3cf2074bb2e180772593cd728026dfe9b7bc2cbc70a0c42fd1a3f071dde69a5dcd32cb951da688b87961591b4671e63cf37feaac76f85b3bdaad65e1cd467ba00007d55848be0f405c78f5a56c1e95451864bf9fbef7bde2667d4d7d9d9ea1091e7a922d0137c5fc0d077e4e61bc5b0146c291ade0c82e3d68a0704ab7ca369e014cde4fbfbb2267345e7a7b6e27df356d3566411220610d72fd12f80461a6178df46c6ff661d7927befa3d95c26e351cdae73b73da338e9af046368d9424a9a921f44d0775c2f88d30494d46cccd7d98b0111a9907d5834f07bad6df1a4c6503542bf77cf1d9f1ff4ae3fbbd86384b17161022073d14e0bb52c762fdd85609bbb6aeeb65f6b300de37a94e71c166d875ba535e3a9c98f35ef27130b6188ec5b83ae1d389a4fc5a091ec64b035aaba22448ad7139eb18f30ffc3ccd08f0056a2c495799c100addcb043ba8d64b2357957aa361a3381912e562f230a55dfcd4d99220660a79e57b0fc705c666b34658452c252cc73de9657549788a607165e6227aadb6003f874a93a59f8739d6a25da9c3d4cf2d3c270cee5825a81f3fc266c48f4e869e98b1094fe3d270a43cfd6ae4e4ab093ca5acbd508f5fe4f32c4812551b270623c590f8d40be1fc477a9f386f5047819d1b75356261e4ec87168ee209dab90ea802f9c4fd387eb1452d77c3be090a75c8f6515ae93d8e88951d3403efc24fcbf8ca7090eb402a7a6cff733a9ea659624514022292888fdc7794fbb6706a0bf279a669d3a44c333c71bc0f51905e2da32adcc991993e861210274c23161481922fa3c0ccf6f3c63bc7d31338f44fbc7eacd025c7694b10a7a26559b6dcca7a9f791cca9cc82285a7ad1bfbc8298648d9223cb0ba01e9b23e6ff5bdc0000d4dfc30e5922de438e715df092493324ca11560fd79ac90fe21a8277f1a73ed780276d9bbdf51dcf6f96dba6e38d4e88761bfa56472b5876202015db2bcc15cec8e7691429160c0d5b51a7f3c2b0c94ed769860ad87e24f61d8a29e98c0e41e865d76c38c4b06d57abba2039b37d05994b4c0619611e19856cba635e32d2dcadd85d972b29753ab8167c6e0c28c0cf099a3d4f34ddc973cea992d6e1d0eb86dc659d6a2ee550c4b6db97157f2af7ad1bbcb61491a79afc696d5ae72ec9316c34d3ae007326d4c2cc048b29fa985d78ecb7f5610a512b6f26b322fc39025577"], 0x3}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000540)=[{&(0x7f0000000280)="23d0a6273c695c7e52b8de628a362bc0ebfd287e2813ba540c11c00187730796bcd9dcffe2e21ec8cb31ec76d0a065feda9f7184b22d3c14b3cece5b851c0510f8be2d956b4ce419963bbdbc120cc68f80fb73f1e0445632c4736b1525b54a4d4ff9cde14cc54ecc1b0b244cc9c66a7caea1553d9b3c1fad83686658c0935a331ea0aa8abd0b2a0a1f3325bd44e130a6bdedb595a7b0638670a0205dc4992b0df12f4d0b9e1cab72b5d1086114f09c8f9e89a083a9c598a9db3093ef5b923a11f9a40ba3b475bbda18db500a6f14036b45f84f2a8176", 0xd6}, {&(0x7f0000000380)="5c9b6c0d248daffbc6e6d7faadc7d9faadd432e6e0d9920fb0dcfb148f6d960c2a901466969c342ce59d0a132cf66038b886768f065a548463084ca7f97046bf7f64917c4d2d68e641982f2b3f3a0a4423bbdb9aa5a98b0b6e845e73352a621c731fbf2855f13e871471e6b02f71dc0487dba7831ea7e53208f97721286396e9e7b0f86debe543a46cf3d098645e5cf7ad3ffcc7cb46bc20cf076e45f73810e1b27703c0bdfbe8b58ab301be2712ee768276b8a32c2a8f8190df422ca77ce7c3ce25d6cf7d57d70b3a42a84e4f2a5dfa6e0687636116e67d020b9e1bed4a294d8b2efc2c540505e3", 0xe8}, {&(0x7f00000000c0)="9d705620f79cae3b03cdde566501ed2559251ebe56d752b0c935c3d6e3d8c03ebae0b7ec12390401e16b3ae1d53dce0bb2fd98db6b8552bc1ce78c8f9a12246873669f25c800e1bd496c5d7ed7ca97ffbd", 0x51}, {&(0x7f00000001c0)="ce2a044e6d422f7954f982a47a9c4acf04e2e1c7f79945b2abb335c6320c19cee5d3ec135d345194dbf90afa7e4495a94178bf68d9224821aa5f63b29e8da33b2b3fcf583ef0f4cab6d93035e07ea6b54ec8493b2e98acd041cdeb1ce452b86b6db8aec770cf620396fdcee95164c00442ce", 0x72}, {&(0x7f0000000480)="26bbd687270e652efa3bc5bd45ddfbd4a93d224dae264a8f10c11222818a38e3950cd8d37f2b22eda482eed166832b3caeae65df4be458636ab9653571d8f8c396d0b3a7394e808ebd1dda895ef56ece5d00fdf60f8baa3084303ef27c959792f9db81c4996d68ef1e67278d3397c99a0d782b1122496c275d6f4eac74e666acb8772a193b96ce2e0c0f7a555bf03d50837d5722e36d4c75783d4b4e1f35746370ad74", 0xa3}], 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="68000000000000001701000002000000520000000fb00200b72d3406c7e2a39eb261b24f067b6ef14cc8f6b3201fff741e9c2ef5515fbd236262661df78443ccf33378387093db8fc9588299acea4f6d9b751fd0607fdf5c4b4919f9f22f6bd84f40b8dd74ca0000"], 0x68}], 0x1, 0x0) [ 596.772609][T26902] binder: 26897:26902 ioctl b63b 200003c0 returned -22 15:43:57 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a0000", @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:58 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2000}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a0000", @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:58 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0x43, 0x4, "0d3819e62886bbe2d08a2d50eb633dc1f5af44c7eb95a3d2efaa6d954f1168d3731f793a261164ded9e59a85c48f923fa0a689ebacc639ce3f1d1ffb2b4130", 0x26}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:58 executing program 4: socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)={0x8d, 0x2, 0x4, 0x20000000, 0x6, {r2, r3/1000+10000}, {0x6, 0x8, 0x6, 0xdd, 0x20, 0x0, "fd953622"}, 0x1e53, 0x3, @userptr=0x80000000, 0xcb1c}) getdents64(r1, 0x0, 0x352) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x0, 0xb, "7a14ed6ffc9f033669a495c390ac5b0d56266f"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}}, 0x20048044) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet(0x2b, 0x801, 0xff) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r8 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f00000001c0)={'ipvlan1\x00'}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="62726f75746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b95df292ff0a1ba0000000000000000000000000000000000000000000000000000e2540ddb2573c2eff888996382565e4d757e7959e67fb0e68c4b90e62108a8b411650787403fc7933f2bb10d93b3046fd5d18283a5a326168a656606792ae92eb719a5e4e6610b17309d266ce93db3ef54f2fbcaed7728de78416631ae074b9609bdec"], 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$sock_netdev_private(r9, 0x89f3, &(0x7f00000007c0)="16dc83c8821593f32e116021f20e8e40c4242a2b48bf051fa335bc7f5b0bc36d6519017b3821c165aff6a8b840c028643c2a022db763892b4cda05e046b8918602845fa13401f2fdc70e9061a24d3b7d3459c159363d167e6dbb5b8ff322cb2bbd45d56aab998f0565301cb0352b443144f1bd0eb9b7d1c02482bb89aa3c5a103765a1b44e370c76d5235c06a20e12f760bcdbd1aa6976ed733a079616da93dd9b9e57328c76b3934df8a517854164a582a851d8a37d075dbe6ddeb5f02046eb1d3c1ad5adc7b178338cc1") ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x1, 0x2}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r5, 0x0) unshare(0x60020000) 15:43:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000140)) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='comm\x00') getpgrp(r3) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000080)='comm\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) fcntl$setown(r5, 0x8, r4) sysfs$2(0x2, 0xb856, &(0x7f0000000200)=""/165) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x0, 0x7]) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x10000) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000001", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4a0) 15:43:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400fcbd1000010000000000000000000000000a20000000000a010500000000000000000000000009001c0073797a3000000000240000000c0a00000000000000000000000000000900010073797a3100000000040003806d8ced3900c22efb0000000000000000000000002600010073790000000c0006400000000000000000140000001100010000000000000000000000000a00000000000000000000009fac9342a98e29fa83ded88165fd4ac1e0d107c1838068306f0455defd149bb12b427546f04fcd6ff3f62b220f325955dbd5e211531a13aa233da5"], 0xa0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) signalfd4(r1, &(0x7f0000000000)={[0x3]}, 0x8, 0x80800) 15:43:58 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a0000", @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 597.565164][T27041] IPVS: ftp: loaded support on port[0] = 21 [ 597.570719][T27047] x_tables: duplicate underflow at hook 2 15:43:58 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x80) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000440), &(0x7f0000000480)=0x4) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:43:58 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x102, 0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000000c0)) close(r3) ftruncate(r3, 0x0) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000000)) 15:43:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x3, 0x0, 0xb201}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00'/20, @ANYRES32=r10, @ANYBLOB="00000000000000001400128000000100000000000000000000000280"], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) ftruncate(r11, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000200)={'veth1_to_hsr\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x3, 0xb7, "d46980c2e1060fe6291f539bed06ec2f8d2b783c9fe1b0b391f70b8ece9f1afc995f6de7c5b68d51941df3ff383ebc3dac6a637f11a7ac4808e9304f10efd609bf47f0a4c6d22c5085bc7820274cbcd06a34c05fe53266b8f7c9c881b57c54ad7c42e8a53c50155772a78d4379114346762ab874371bd7c5a32818847821dc7da6acbea071eb60e928f294040b3e63f2399523b8b43fef62fc9261569eeb5397b062c911b8733d035845a1fda86c73e071f249fee59bc1"}}) recvmmsg(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/6, 0x6}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/117, 0x75}], 0x4, &(0x7f0000000880)=""/37, 0x25}, 0x7ff}, {{&(0x7f00000008c0)=@tipc=@name, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000000a00)=""/31, 0x1f}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000a80)=""/107, 0x6b}], 0x4, &(0x7f0000000b40)=""/213, 0xd5}, 0xff}, {{&(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=""/21, 0x15}, 0x8}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/159, 0x9f}, {&(0x7f0000000e80)=""/35, 0x23}], 0x2, &(0x7f0000000f00)=""/4096, 0x1000}, 0xffffffe1}, {{&(0x7f0000001f00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002000)=""/116, 0x74}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/188, 0xbc}, {&(0x7f0000001f80)=""/48, 0x30}, {&(0x7f0000003140)=""/37, 0x25}], 0x5, &(0x7f0000003200)=""/95, 0x5f}, 0x3}, {{&(0x7f0000003280)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003300)=""/228, 0xe4}, {&(0x7f0000003400)=""/202, 0xca}], 0x2}, 0x71}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003540)=""/205, 0xcd}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=""/95, 0x5f}, 0x9}, {{&(0x7f0000003700)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003780)=""/236, 0xec}], 0x1, &(0x7f00000038c0)=""/165, 0xa5}, 0x7}, {{&(0x7f0000003980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/82, 0x52}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/72, 0x48}, {&(0x7f0000003b00)=""/107, 0x6b}, {&(0x7f0000003b80)=""/157, 0x9d}], 0x5}, 0x3}], 0x9, 0x141, &(0x7f0000003f00)) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000006040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006000)={&(0x7f0000003f40)={0x70, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5c1, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c000}, 0xc4845) 15:43:59 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00000000000000", @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:43:59 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000002c0)={0xa00000, 0x8, 0xc016, r4, 0x0, &(0x7f0000000280)={0x9909c9, 0x4, [], @ptr=0xc8d7}}) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4044090) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x20, 0x20000) signalfd(r6, &(0x7f0000000080)={[0x1000]}, 0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x121580, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x3a1040, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000100)) 15:43:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4002, 0x0) accept4(r2, 0x0, &(0x7f0000000080), 0x80000) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x440, 0x0, 0x0, 0x0, 0x258, 0x140, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x1, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x2, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x4, 0x1], 0x5, 0x2a, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245c085546f0b5c0bb82a4b23946d2c00"}}}, {{@ipv6={@local, @rand_addr="8289f9e3e214848688b8f3c44f1d5418", [0xff000000, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xffffff00], 'veth0_to_hsr\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x5c, 0x4, 0x7, 0xf}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:43:59 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x400, 0x70bd29, 0x25dfdbfe, {{'morus1280\x00'}, [], [], 0x4000, 0x2400}, ["", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x840) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:43:59 executing program 4: socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)={0x8d, 0x2, 0x4, 0x20000000, 0x6, {r2, r3/1000+10000}, {0x6, 0x8, 0x6, 0xdd, 0x20, 0x0, "fd953622"}, 0x1e53, 0x3, @userptr=0x80000000, 0xcb1c}) getdents64(r1, 0x0, 0x352) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x0, 0xb, "7a14ed6ffc9f033669a495c390ac5b0d56266f"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}}, 0x20048044) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet(0x2b, 0x801, 0xff) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r8 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f00000001c0)={'ipvlan1\x00'}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="62726f75746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b95df292ff0a1ba0000000000000000000000000000000000000000000000000000e2540ddb2573c2eff888996382565e4d757e7959e67fb0e68c4b90e62108a8b411650787403fc7933f2bb10d93b3046fd5d18283a5a326168a656606792ae92eb719a5e4e6610b17309d266ce93db3ef54f2fbcaed7728de78416631ae074b9609bdec"], 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$sock_netdev_private(r9, 0x89f3, &(0x7f00000007c0)="16dc83c8821593f32e116021f20e8e40c4242a2b48bf051fa335bc7f5b0bc36d6519017b3821c165aff6a8b840c028643c2a022db763892b4cda05e046b8918602845fa13401f2fdc70e9061a24d3b7d3459c159363d167e6dbb5b8ff322cb2bbd45d56aab998f0565301cb0352b443144f1bd0eb9b7d1c02482bb89aa3c5a103765a1b44e370c76d5235c06a20e12f760bcdbd1aa6976ed733a079616da93dd9b9e57328c76b3934df8a517854164a582a851d8a37d075dbe6ddeb5f02046eb1d3c1ad5adc7b178338cc1") ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x1, 0x2}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r5, 0x0) unshare(0x60020000) [ 598.712818][ T276] tipc: TX() has been purged, node left! [ 598.861715][T27214] IPVS: ftp: loaded support on port[0] = 21 15:43:59 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00000000000000", @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty, 0x7fffffff}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002280)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="fe8000000000000000000000000000bb00000000000000000000ffffac1414bbffffff00ff000000ff000000ff000000000000ff000000ff00000000000000006970366772653000000000000000000069705f76746930000000000000000000ff000000000000000000000000000000000000000000000000000000000000002b00200508000000000000001801400100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000104000003010400090000000104da000800810009000700aa000600000400000400200008020c0028006d68000000000000000000000000000000000000000000000000000000007b2901000000000028004e465155455545000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800180100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000100000001000000050000002001d49f40004c4f47000000000000000000000000000000000000000000000000000000071011eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0001801000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000e74db010000000048004c454400000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000010200000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000096ed1825364f90ffe2df90f95d218dfa8ffd2140be3c"], 0x4a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/123, 0x7b}], 0x1}}], 0x3b, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000002180)=""/203, 0xcb}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001fc0)=""/251, 0xfb}, {&(0x7f0000000f00)=""/71, 0x47}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xb7d}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) close(r3) ftruncate(r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000280)={0x5, 0xa3, 0x6, 0x7, 0x40, 0x4, 0x0, 0x6, 0x6c80a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x2, 0x4}, 0x5, 0xfff, 0x3, 0x5, 0xec69, 0xa56, 0x8}) 15:44:00 executing program 0: r0 = timerfd_create(0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000002180), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000080)=""/52) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$sg(0x0, 0x1000, 0x101000) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x20000800, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20000121) 15:44:00 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00000000000000", @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:00 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000180)=0x1, 0x4) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x6}) [ 599.618231][T27316] x_tables: duplicate underflow at hook 2 15:44:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) connect$unix(r4, &(0x7f0000001600)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000017c0)='trusted.overlay.upper\x00', &(0x7f0000001800)={0x0, 0xfb, 0x1015, 0x7, 0x1, "a0dfb9d02046351a583b313f3826025e", "e94022716ec6670d8bf83a3a7679d7c1e5a0309d18701f7250cedf676f53315581b1518bc3ab688b892d0660bc0187a53a7849e38170054ac1500dabbb53203b6af60eb702b8c422dedff005bf04ef4899568ea637df09503a90bbf98aa731c2ecf033d0529bb4cfe29cda8977252331edb3ff5339187a5ad1541cc553d881291a39b795eaa8c15c369f19c03fc1a1e870bd957fa478e3ab18931e9de9a1c7f850e2a2ee3583c3118c87ccacb9e593048d17a41508f1e17ed948169f7268990af4074c12f9605cf7e616d1b8757a38af51294299bbadc4340a52e6826197916925f152c485a5eaa4cd8d056c713c1d3ebd21d03e41cd5d1848e8ddc99098ac9c26e3bcfccaa3f0d1e253cb4511a9f09cc75fcb7cb7387eaafc4915bf9ca795ee4c31eab7141bc0e18fb7cc348a9a49a0b055804079224bd157c9f9cd0a8abf09a0d45fc35832844e4a60cb4c3178bffed9cb9a291c2cb888b864e9ac2aed30ae03c4ef3eac47db2a4cab1dad03d3555d9e97fe6386b1230a9a1aa44dad8893c3fbdf00edaac96c0be423b2a3c19a962675677d326ea0be487d217f94adff05cec4671ffd24bd52ddf85475e145e8504bd9c457d9562c74c105cf5b8b65c0e78ccdb0226aa6b5bea6045773a0fc3cd4f9d202723780ac16ed1ed90485b4280f0a1510c678d08058980fca2dfd348378d02ca3e0fb97a24a8cc9d33939b2961494ac52366542a83f0b6a877f682329ea5eb6b5342ec4887cec614a0570b72c7ef579958b341d530f5181335ddace7ac8f509ec88240e9649ffb3c8c497440f4a258f147c5f67a3412f6a9f67fed0ab6978d9c11a95ddb06db58d8286ceaa9645a83ffc3c08ef84394480f29f602601af164e336208aecbba2bf82c138c013429d70eef22c10fef3dac38a17b604f352dce3c45c2825daf142e5cf2ce6ef6e1d5011d841f80ea32c29c286e263e999d479f24530e56dc2d0d8c6eb44d008977ab3d3c0c95aa740bfc565de058d2b089f2d540cc045c82200f90fb211dc6787e65ee328a975de042084d8c389a434756117fc7ab906af0b32b702c2e68179efc7cc8b3ce92157f5ab3d7139580f31f469aa2ac50673f57242718548027f1d1bc33df6602c72d8e217f630233027aebf0dbcf1fbc2e46e1e2871aa468b6be715fe4eee65bb00dc9f83b168db83435d4614d07466053be2cc5bb89184868f7977c488f5c95bde538ce824f0958c798779b330c080b78f3416e2f368d96b13c08bbf0fb4839eb77236ead49e3c5609d264ad4da2c8f2f9ce45ac19476326e86eb0e3ecea29b081ab4e1fd5e8e283e00e6b6e0afccb7ad3caca2bb7b01121a512cca4b4a631491ba9eb8585a388b6151d3dfd449d43a701c5b98159771022d065a444deeb440baae25ee2cf4b4aec5de610fa5db56b0bc05fd9e8a866f0ccc48424c24d6e6e6a8b428429124c4a10fadffef47558d0ba7e942f41bb9a66f21e6b306d36852cebb0ef416cb2c70c720242ea5b606e1d83a48daa50f9d3d07b8b6a3fafaf0e0e634fec7397b97e4d165eb42e9301092c75748b0148404eac6f2e7cbe9f5fa597dc696676cd0251198b18c2181dbfe4590c3826db5bbe49a0fc97fc4f690ada1933f964751c0b069ea7080b7d0b0f9e8d05ef90d6d6e6011a75da4ad717064efa9ee9640258a2c34dd303f3155871890bd30e6cb21978be014f6e9972b5e20ac09c09dc0e6e63c6ea1724152dbe09a7ec61c408558e351864c186386fdb6e338f7fc7f0c99454e38ec637c3b88128a3376c3175e391c89e6821cbbc03710c25f7530a738c03bb2f5954a66e589ec492af53d85e236cfffd812a19825aa2c836223b51cf43e4a7999ff41d26fa6db1435562b3d2f03a7c64d8d8e99a29494e99078351a8ae3f39cd5d74aff0cb57ac19c705125b1f3aaa8c54de904e8beb2e3df24dcd7a263ec98996aba112e668ba14bc1bc1dba8e8425a6398a8248546041010dbe52a3ec18be179c8ab46f9fc5b069d0da2179cf6b641820a9e1df9bbf975599de28f24883fc1946dd3106fb78b6c442681b5bfcafa2749dd5c8bc7ae4e3ad4ea269b54d71a1e4a8ad6e84ca38662c25fc010bef1c74d21fdd7afc43d628d36a3d40af32a1c717e7ea3eae5ad7e3726893e1dacd2dbb80a7724e8a7a57b5253c9177f95c98aab125830272a1e7dd790db1dc4af33b3dc410e6763130d4505dbbafdb3d3a91088a3a647577f9f300bed24011b509d5bb7bc6059c16bd949055ef05502c5bf85b74126befa94770ea994c7d33b9156962a8a21f8d4c308b61a84425796842176f4ad4fbe8f32f143fef870e1fcbbe1d9207bb506e1802cfdd7006d0b03485baf4ecc65db928ff5a421a3b5599f8b28a55c5d0532dae6990a6979ecea25af46650367e0cebcb10ac515face18e3c764c6dc30b2ea81afcf6d2338ad8cf882c22c13b2629f74a97792a7471d00f1f70320bb0ad2772641578dafa6bbc4452cc9f865f43a0944bad3dbef931634aad1d93b36e748c97b01ebfc68c61ffd30765f96199b1e6a3a31292e77356225c9991e778bfa70e1a2ed0c293e63aab72c33130a9de3751395111ca53167afc3434218b1754a29eea722edd2cf7ba524caafa580ea7de4341242947c8061807638a49e4dfde90ce2c27b909d05fcaf4b6f3f4c85ef7f20905173879b556e5ca07b03842f081ec6d20931fb37663a4a3025d1538b691488dc014f31604339c44ffb4db4b07827b60ff4ebce8ebba5055e07ceb4e5f2d10cf60e3282b2d16e8c38095049c2b9d1f82f4aa7df48b763c8483f2280ee6d87d1d5c0fa59d4294f0a8935d0c51c8fac5a8724cabd87a3733c473fc372f49a83b6297122ac6e2aad48c3513be30b8a708257f300a459258d7595593311aacf94ba5929329d58409f47d5bcfb7086eff6f79a21e88f6403516c0d8aa0b32cb216d1593e56737eeb9e23bb761dfa502c9bcb24e7d283a9ebd53baab67d5e8a3ff3ee14c454a114f948b9b2d1ad7b5d8b5192dcebb7bdf6d04989000bf22f49604619340cd0e9683de11a73ea92e318d6ede693a35ec88d77105c107424140cc2ae561e41a87207149a4b5580c33d1b47d97e4a37ea9836bf338ed715bac36c019ee6b0947bea6823838830ef5e64df7024d9d1c906e89d4723b622cc3ad73e60098077624bebde312845b4f420fbb16a129eb355fde820e4864a0dd1817013e8f587ed171a7edf2b68dccbc26868df419fb691100a3d05d807977e729790e6636b3f4f090dc5ca43f396596cce09fddb827f4bf8e89fb080ee1c30588f17843952866c33997b26ab20626df48dc17e37948df7aa85d42315a75278e83016605466951fdfbbae733cf209e68c9fa8956178bd6916b04119eb1945fa29214394f899cbdd0e04e6353c427f42a92a69bb43d127cc2118fa27cbd89836a6fdad710c4c018ba4b003f9f516d3af528cd59956fc8d0d413f7b3182b9bf05f5364417892c1d809cdc6718a84fa9c77ba408b1450e81a92c3518f064c2cee7603bd4445e90b52b5550a24e0ba3c431364059df5d36db99b96d8352187b686b8657bc64d5f2ee9002975e2b6ab8d6455b8641e84baef58cc8d5a92a7420b6d49a875e6bb05e95b4c3a2cd0e74644fa0cecc6a5ab85b8a89f6e8467d2e0c3bd57bfdbc7775bd58404642ccb90f9b7742012daba73083d9ab26e1212ea9e767922177726bf1edcdff1a46f3fed06e7aa3a4cb3b90d0e6be98108414d3f0a29763299e3a782a1bc1e69ba40881a922fef2e599a8338be033edc58d68e996984ff9f35c572bc2153a66129487d5b5ff940e54a15dca1cc760e96e3869efcf20c18a1cb107158d35015151e244748a3c7c90b37083df692bf8f9385ad33762214fb5b9aaed69076e428e7a15ad46d18f36a98a5344ab324534587a1dee295e57b438554a4d2c8db3452d322b6497ec53d0f92eb362f43e443d267a9ade1d6ef98febf02ef24387225f99f8b33dccbdfc51a622ff56ce808a306ecbac4004222a870bdba5fada5448d2fcc5d2c6879563b13ff667af269a0460be3e2e73b14f599948d37141849cb870e0c595b04c8776b33a0a8a56c40bb87ede09475ccc0677dced4b35a19efc0025b795d65e58d7870bf431238c15faa967cadf3b64997fb56347720d2dd186124c778730b41409f8f64487c4ca8ec0501cd4fbf6c7ad8d08687c3e6b01a220a1d740951caba6e1d9174e29c546788e4aae2801a2fc2f8dd02695b207157c6924f9070e1e800f89e173e8d02366313a3f2a6397643d792f79b5dda727d450f743c0e9188e07d34031f716c53ad394191ab0965cad5cf751ab69c62f72daec205bc4da02d1b3765d08b10b8ff8e0475208cb8bdf01a3a29f7ce3c1d20743b56f35a585bf7dfa4bb7e65bbd4c358558013fd28c5a4934def30ddf4787a2cc851988a463459c59de6a259ef4df15698d33923539c66ec0347d4e5b5db168e60712a17d4280d655c1205618aba9a59069fa869a1cafec537c65135c77f1fdab01c352f9ae0d9bf47424f70774751da45e656fbd7358a85f6e0b719b17bc0a20cc7c8e5f272beff5981bf7ac1d477a0bd288ef39f7d4b9e09c59794c30ec644d7094402139dc0a24a5528cc31c3f6a3a916cad12be94770816a7d9eb6745275f284674953d082f49e378c3781a8ef4f1e128582d2f11726dc70401cc13d7cc4060d92a7c02889121e733ce3c1d46b342440829550d24e61925a79cce7aa67d51e7a5a49735917c588521c6266e1526a285fa938e2f93ad9758937c2eb1079952130b565d04a7cee11132c3f70e0afa970ac956bf1f0e13a9b8d7ea018f13d168f0bf833c3dfd043b7e30dee47e4d18277681430038fec0ea77fbb761e441a48fe4a2cd836fff6663f8e0164352efa1143516240127dc815d43cdce4feaf5b6a24116d650830918f4d6e4ceab95a202de3c74fb6c687e78abfc0ff8e4f752e91907e2be96dfde2302c823557d7d64787a4829fc0af07530a3a45ab5c445295d3bb0a3b91499ff589b020f9e1e633c1fb61f7853498123cfdcc6fbe14fb68580972282ffa8c23bbd294f901b5fe5d92e34ceab77527db574c0bfb76a63fe245c3fbb690120532ba4f5a3072b859e9e1cbe9c16c0083ea9cee577fee7a3cd95e98799c9cb7ca6adab80d78a9a82e3ebeb3d7b2dcbeca9b204c642cc9c9a1670d5d6c7569e20b1f0c199f6c188f59187f418cb097b1f0b3f90a6caeb1490c68580cd96ac36d8cfb6e91c926e5774be29d6fc91147559ddb9244566f6cf6ddb05bc262dbdba9746c4266fb7695cb32ef05f43e5d35c1016e1c95d6225301c6d0e9809e0dde23ded3ec439dc5218948eace343039e7ccb46bc21af77db7fcd6f6b0f7a3d9b139a189c69a4c89b623a4962ddbb9120612c6d425eb69683aab5ca7d5cdc32add78a65611967e8cea7fe872081631001ccf77d7c2c5972c8ec5c4c4a169ed91edcb12e87da1a133c8a76a3585eed9c588bcfc4da23cb9d7ce292cac5ed34f510ac0d106de3b25e4b770222b287daaff1e6ea8e191b7284e946ae6ab02c4c06a5a9de654ad3fbfa1108b9d0c9c319eee0abab45a819e741938ff39c1ee9ebbe6f90b0a0779825d8811182b5fd3806c83a3a566c7d5e31a01e8d088c478bea07e77189f1ac9a45783aedcd68c5acb6ff746cd9a56a6def37a16adbd6f0695ff3690f8a0d1b1d378e4109be5985360e9b33de2b2cbe293c2593b40ce6332cc7f5d111dccabd202a9f9e1ec2bd008f348061ac4b66a9e9ad728"}, 0x1015, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4f20, 0x0, @empty}, 0x1c) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000001580)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e20, @remote}, 0x40, 0x0, 0x0, 0x0, 0xe55b, &(0x7f0000001540)='bridge0\x00', 0x8, 0x7, 0x6}) r8 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x4d8080) sendmsg$unix(r8, &(0x7f0000000380)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000100)="53592d1ee4f9d2052d9abae78ab024f9f9f8bd4f66481150b1e166bbbb9157c8e7a5c1f5c4cb4787ab9490b500f34d61723aeb5bae91d6c551be31dfd11e5f6a7c6256f03c89", 0x46}, {&(0x7f0000000400)="76ae0f0a67bb4d46792d76b31e129b0ec4e8a9d4949cfb6bcc86eddfc871243e66c1e57b9f5d3cdf83193f6eff7bb951871d8efdcec38a2a143322dfbf65b6a1222edb07e88f8eadc0147d8c4b4c1ccd48669e3e0c58251f9c230286f00707c725c9923233db923b276b6e32fbef2545422d69fda70c3e9f1b46b2c584544f84b830b0d54980b6528d3b5ae3d82f6c83be6bfaa8bcbdb22e8b895d4db2126366e1ad088c1fd255cb31003da501c0e59e11372cdd0f2cb4d11bf2ac2f5b9602794a27c4aef7c8599ba141148aa96ff429762feb06455f50e62b6f2354d0629290eeb5cb3c7c68172f69f03b69cb2fd2e7bf2e7ead42e8e84e8283195700d88b39fab6b6bab81fb066592ff6bf8b59df1a8eafd645bf14e71cbd2ec9cf2af66ce8b96b19c38fc8f93c78601325e946ec57922c4c9bebb11a5ee7b635cb7cbe17bd673289ae669fb8bdbade84fd63cf4f294384167f9d3f1c4488ea833d45868692017e0ae46997068f722e4e07ce58d8aee382b2290abe137e7d7d3e242a17d721462fdcd09cdd5376fd643541f70a5d1d0b20e3b3c4503cc7d77d8bc7b9a9376c80340d60ab9642643a2c612535540d57ce968db971064d4c7be7c1cb60ebe5cbba34110b9a2cda3b3383785751a19b1a42c005a51a42363222f5f2032f0abe794efdaa6b6459143cddd33d63db841fe50d5a8ea17396086ccf30ae6f3f41d46f5ff350e91490c7ea57018916dd595a5e46ef44c18bfe720a947814ef9290877ad4763a876ab80edfda0c9411e17aa84d4e7427ab1a58af9ffd6e24de6c71f181e7472c40e84d2354494265c7a1410fd6ee4704a70ed01b1a14aa1b0d2b8a19c5d8538f7e3beb869571fe9da14fe1954a7baa529f816503d2165f0d1779f3963f6fc9fe5187469d9697bcec3ea0e3685f3fd52caa94270867aa2043f5a6adac7f4be627cb4352fdfddb550ad613d5777fd21f721ab8d1b6de883cb2512c3c1c322161c9c194044274b8ea19bdba863128f82431b917d9ccf581e549fdaca025534bf3964e25d194c36d7dd8ca329c8e7de549a6662816889fc63a21f0753eeb019216e6ad74c861396c0dd5b02f24dfe6a68bd05f16c862e2dd0431e5ade0d3a4850b9e3b89e49a134ba902bd5e86bafda9c07c7fe7ba9f394ffd606574730a97021ab1a3143287198f39d7f00d3f58b0af66f56e29d09ca5d8629a659f2d7b0a8da502bcc6bf3775490a6aa6670aa5a875af994e92220843c43acec798bbc94eb6956ee2677ba17c322984f75d664a296bbb65ea02a1a4854dcd8768fcb8a0d091c88492494ce5c2462f1da6c4f5d7f0046266c50b5f9785e75e924f5d9a6778fedd04dcb1be60280dd64480a905eaffb5d38ad37fa883c0f2f60e44d492a87857d4f4ce966a50c95ab727400809bd30732ea65b9e62986b40f94491746a080eb1f3aa52fd6b7bc2cb275f57448396ba9720cf58b4c215dc212ed8369c14ef9a1bb8976b8cf1049566555b828648fb15658ab0b97dc016bd083dac31c81d0009fb542be1d8fbf77c0d8c603be9935818f190bb24391c9e57493ea81631e2afb7a3005009fff0bbf3a7617977bffa8bc1f9d1668dbb39c9cbed5dfafc37ee85791eaf370306a102e24f594baf42410917c3dd40893a171a9fea5708f1684ee7327198fc4e3725f5eec7b29529a90c8f8f18957092636567f96d623c4931debbb04393e0a1b091f508848500e230f2e4e223517c8541b59176871bedbe7440445ac9b42511191d3e1b7cde34af273cf1e74d837f89f59fd2faea9dadcdeeb58809179bfaeaae9c5f73c14ad05867ebeada2d240d6323b44a03ff7d798c9460b6b81b60e2645df737cdc63beb93bdcd3ce8be4c71ae4458e7867baf530822ac9b4608fbd9d68a1183843ae108dfcd569ae652a1bb53f7609bbdb62f7dd67ad594eb2ed83e30ed9b560b641fefd73b11c85643746066d261d398f7d8472658929f11cd980cf072564c1474ef1b5983f2ec2e399a2e1ebea6da51e0b0bebf234dd80b31748154bbc230aad8c2471531c1ff97996606251fd3cbce516217355624161c341a5136519adab104d708a453d686305fdde173c3b8d5b943534d989efa419b779134e301e331c3a00c124b24be69b0162e9e27b2bea28ce804473167c80d83afd115c8d5db611829074472c3c6a58c6b7e600549452247d2549a2df2ce64e8b83100bf2283dc57da43fe22917f606b8ba634610de0b729c4d57fbf25654593bcb21b08199422413ea2f05c11e0dd0f75af577739227dc47e7e737c49d5644bd9fdf3b9be732366e51686c25a11902c0bfe31f3f2027777393d568bec2aabe30edadfec58d6f739ee535acd6e53a8059c7e518ab1881355522021e37683fbe783657c071ab622e8de40eca8537b65ca9ced99bb70591a7ae880d879f8e078a397e96f0515dac7722fcadad72fe2e610ee9ba70c6f1a65c70efed44092d950a4e096e0e814c59a25138f038fdaa7120479b71a6ffb1c821b1ba8fd7b990cf1db48127cd54da8ad6a3e7d2df03ef75725181f64782d3dd4cf7b665176507e76e91f4c1f10973f4da6ccd336cb20d7b1873a34b74274b3fa6472c7027263d6d9291fb1b74e7f4bfb3407f985a6fc174c92173b3c11a7eb8f0ddeeb70de129ae9f5aa7099051499963e0f4ed6da6833b0926fe760166d097622e45ea21b2210c9ab8dee638eeb29d03eb224d0135828126930808923453f5d72e9425c7d79099ab1007555db9b340d4d375a00ee3910694d893eb87468b574d9175b17667ee86694a3db1e8656c7647f99d858138ac036bc17f8504267e873bf4b76f13269cff3b3a8fb8c1963bc2fdab72a5757327f078a3f0eb59f8eef177ad6d14f26dcb2b34379fa0cd6322bc65bdd62bd2e3d98a38a414f379ba91976fecc56b3841554138c3f6a56b51308eed9a6830aa44dd6afd5c601bfe3c86df991fa196cd5c5617228186e18b825a6779a7085122631cd86ef58bed96a0c21d7e4384f2aed6f099bfc642c0411ec0904b814235d33a4b72755730a76e34a36e06992aa7cc9a8cc1c68c470a6829a49605066e381349a837b5552c14f706ea353941432e4f6799dbccf1c4b88a2b868809b15d99f6e5d5718106057ed8efe19f98bccaad749c49e5c434b7cf777e78b1b59f09e1d71780e147293d4cf1089ce3f9ebcef63443e36a44596f6e5a8195e226213a5445f8511d48f32f9853da2761181fbd90dcdda2d668befbb15d055b0d7f5bbc27aa2a2427d4f3112b67d2f4ca5afdcb6dbb60fb53b3b74b1544d76718ca6c9a62de266fc650128e776c6d078d0fdd77bc49d7e9e7a8f6ca7e9d4a963930c20fda9467dd766ebe033dd13d5a8c192426e00ac3222a8ce02d4932613ba8c1662663f69e4c72fb31cc8a5324fc1d87f1f659aadb21aa147a2921b0e2298ddad3cc9769ca05a53579d7bb21b3594add3186855e40a73ac9b060a10cfbc6ad75a8d99d8e00ec530d30b585d308e47755f8686b8b108474cc380fa5d0127945709d9a384407d7530cb2aab9364805dad00b792b9408241baa260f762ba3a590df1c28c03bb6d509fd5c51f1a2ae876d10ba46f23be6920c3d50487d52172afc348dcfbc847de447befcaa82f7d85c98aef51d328f88b08d7202b4f990c4494cc3f8734ca667646725333c4f3bc36ea30d71dbad997b25aaf0dfcb400da82ff5387272fd2f61c8629ba9d224677c3c0de69de6f2485f8301be0e6ec090f3f9b039ff4009d3d45d6ade91d3a703d408ab8596d15eb55bdf7536e1d727eb93a3d9a7f032a0ae88461f067486275e47b1c29d7c6a89e3bfe12826cc6b634d8c1ad2f1e582b8e87b191630559df751cf1944e10aab88748eaa9c29500106a493993008a83e4ba5d68309dbfcdf6dda73708feeab3566c2d0c99def43cd12d2eaee1ae14e338c754c3fd970c64b067d15d8ded2123a6837c592a20bb214ec2d3936811e6e543dd80158230232df115d33a6b3b90f3b4458ce63a87c66cc1201609a1227a8e6e45a0079f7b6af4fa6023db8332882feb78089c1b8b0849186d0c1a584c447d62195fa986e9e10782f2a25094804e6035fdad2383111875b3f29b289bb59a2b5812c6c876804df39c69395ce44be055d0b6acf38111219a7287e7aecc3182009af8515122f97b5594394e310a3a72fac7c78886fef05d0e32361f470e2849d56fee1b1365fe63a0a3c90980833f718d59d7c1aa596066daed0688d67daab077e9216b0f195cde5ea642b90a121320f01d916c7809773f52e804003f14b53ab329f20c875ff17b70efec63c25cb4c67c381dd2c870999e16747f243b35e87bbbfc8791428afd2b147e7f501a09c7986d9ef4e6c86145b01e8af33d689174143378f4c2011606b171ff26a174b7a1da0d48afc7e2c142dc6157b49b7ce875f51532a6e6593bf1512864435582eb64f0b4a020837f6c5cee69dca3645213dd5d4a287cdbf19f72dbc1a5317765b28a066d54519dcf9f96ab9d8ca9aecd2824d3141f362df265d445e68e2fbed1dfa34e3cd932aaac0130f630566ebc4d859262a1ccbee40fafb88e7f55a9f9df267706b9faf5e74c2f45e550a9b308a5842233712a971d9757437ea04a2b47128fd618c5623fdf6362887951dc5f7df6a591164afb0515ce6971c0a1c8cc801c68ec7be25165f11f0accb731a5c7ae10f17a0df10bc0ce632b75f37d8b9171b8894692334244723a0520fe3b7ec7b8e31b944b7c27fc5d16652112a6fb312b45667b286a9fa6005ce00b42829f2dd48222cb8413d49c72c579cea68cc92912296a09999c98af001079f712a0ea37d7bd94d24a3492203505af9089e07eb0ded08da4d0118fb562167965de9de1bb3a18882d1975b3f5583d4a098aa5feb0843100b153be8d28d2497e6e1e5d539b49171d2421b05638db3195e3377822f9be50ced3f3979f7ae16720c82e4172f1d29495c0a35fcbc0bd5dcc7d3981b9e310edf164780427d78b9ea979ddf12832d9134411d6b3bdb490025cdede0e8b2a918831178cde12848c14bec680f2d8e7148e45b2c1ebd16d79571e6e6c5bfbaf483150630766c9cd6a27c4924fe0841468ee633abd7c54ad538b96e37ea57e38d2cbf63c85680e9374678ea573fbabfc7140faa12f515dac2e604d5b7c316f03f03137e848bd30a764e35e17e51b0ced644812e6c5952329f18b0ea40c901f3a52e1852c3fe92979e9964a60ae13d3bb197044a2d7480651b7791c2bd7dec38230f2ba623a61247ad7197f276be25a992c6ca7f5c6856573810e3acf9682a1a91e357b0ed8c1d1d9b8488d844c141c864bd22e2b1e1c147a6b81dafb89d373e956841f9c2ef7b068905df3771ac62b68b13811c479983b55c9f173ee606c20e603b9b7924eb0e567609132530f347c4778161b93b8589cf6933ccd4c46d59bd1c63a064b6bbce1b9b9a89d03be160e0455cd5483d532fde665c26a42329a0bcb27f8c57bff1fbb3411b61410355b05fb2f775c0d86806e2461ded84e473bc82b19d92c768381b64fcc382d048d21f91e14e2ab44da537dfe0a9059529571ac7da6ee8fa51907da9564f6ac0ce08b58d81e6e75d0a966e5878f4eb75c07aa45ff0080ec6d0d77ef06ad97855fad770c980552bd3e760ffd973f51e726b3340b6dc3977640915f346684fa064c6f80ba7867b207c6436ae106de68d81664cac5fa56d976ff3dadd27790e5e7b9986a8fad02deb13811e1ec08a6db667e1d1876af9ab1e9648207c00d9e485f914c", 0x1000}, {&(0x7f0000000180)="fd21ded843a4e8c199f5746acc312e3b9846ea0e2b58d37e5eb304fc8eb8c66d665bfba9ab367c9e178526d68478f91ef14632cd88fc0988840e3b48335bcce5df6b0a9c2fbdd44c366d95f21ec0859683618ee8eb9905fb3920a459401f22ddba5e8bee6155ee30a7", 0x69}, {&(0x7f0000000240)="5f88d141506446b3aba320e826cf22a9321a85146c0a294c216eb52e21fada2ab25ec32aa314aafa39b7fa5aee1ef42b58b2a6b63ffa211bbe6b231d67fbf302901d7afdc93c3b05fca6b6627b9e69cc41c0226fb5d57d3cd6b58926f1929f12dc8ebb0c59eddf46af6ce4cb9d28c8862a3886de6a9b7b4d4843fe89f1ad10be975cedbf9fbd41ec99365bc4212602d26077b2a21c41a6b0ea", 0x99}, {&(0x7f0000000300)="1cd817f614ed5d259e792fb699147ea109267ac17fe8b8790dc672082b3fd23fff38af8ecf01a21df285f829a15b9f0dfb0afd409cafe0aa57030aab65c352d379", 0x41}, {&(0x7f0000001400)="b55341d09f97fe584c142534dd68c1a4279b08fead9ef4474188909837066deb2edcf1e918c0aaf6aa420fa8d844ed65af6e8d260ea4e81be6a88985aa911155443ee6ad0c3186286cdda2c6e5350b1085b759f3a2ff22317ba8dc5c38c76c3b6621ddc0906c70a59c75baef55940080248a3b8fdf758115597aa5c1f2d4f0ff3dee3ec85e457a9743b14aed1d9d9f7f9d3566d97bcfbe89ad95f373", 0x9c}], 0x6, 0x0, 0x0, 0x48085}, 0x4000000) 15:44:01 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/18, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:01 executing program 4: socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)={0x8d, 0x2, 0x4, 0x20000000, 0x6, {r2, r3/1000+10000}, {0x6, 0x8, 0x6, 0xdd, 0x20, 0x0, "fd953622"}, 0x1e53, 0x3, @userptr=0x80000000, 0xcb1c}) getdents64(r1, 0x0, 0x352) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x0, 0xb, "7a14ed6ffc9f033669a495c390ac5b0d56266f"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}}, 0x20048044) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet(0x2b, 0x801, 0xff) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r8 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f00000001c0)={'ipvlan1\x00'}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="62726f75746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b95df292ff0a1ba0000000000000000000000000000000000000000000000000000e2540ddb2573c2eff888996382565e4d757e7959e67fb0e68c4b90e62108a8b411650787403fc7933f2bb10d93b3046fd5d18283a5a326168a656606792ae92eb719a5e4e6610b17309d266ce93db3ef54f2fbcaed7728de78416631ae074b9609bdec"], 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$sock_netdev_private(r9, 0x89f3, &(0x7f00000007c0)="16dc83c8821593f32e116021f20e8e40c4242a2b48bf051fa335bc7f5b0bc36d6519017b3821c165aff6a8b840c028643c2a022db763892b4cda05e046b8918602845fa13401f2fdc70e9061a24d3b7d3459c159363d167e6dbb5b8ff322cb2bbd45d56aab998f0565301cb0352b443144f1bd0eb9b7d1c02482bb89aa3c5a103765a1b44e370c76d5235c06a20e12f760bcdbd1aa6976ed733a079616da93dd9b9e57328c76b3934df8a517854164a582a851d8a37d075dbe6ddeb5f02046eb1d3c1ad5adc7b178338cc1") ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x1, 0x2}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r5, 0x0) unshare(0x60020000) [ 600.442197][T27441] IPVS: ftp: loaded support on port[0] = 21 15:44:01 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000000c0)={{0x1, 0x0, @identifier="e74d900dfa000941f91456d25cf1d653"}}) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x20a00) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]}) 15:44:01 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/18, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fecd54c7259e7950d08f479156d7c900"/79], @ANYBLOB="fe8000000000000000000000000000bb00000000000000000000ffffac1414bbffffff00ff000000ff000000ff000000000000ff000000ff00000000000000006970366772653000000000000000000069705f76746930000000000000000000ff000000000000000000000000000000000000000000000000000000000000002b00200508000000000000001801400100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000104000003010400090000000104da000800810009000700aa000600000400000400200008000c0028006d68000000000000000000000000000000000000000000000000000000007b2901000000000028004e465155455545000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800180100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000100000001000000050000002001000040004c4f47000000000000000000000000000000000000000000000000000000071011eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0001801000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000e74db010000000048004c454400000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000010200000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a0) 15:44:01 executing program 5: epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) ftruncate(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 600.880163][T27451] x_tables: duplicate underflow at hook 2 15:44:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair(0x5, 0xa, 0x1, &(0x7f0000000240)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x8000000}, 0xc) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x5c}}, 0x40083) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x54, r4, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x24008811) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:44:02 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/18, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:02 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000140)=""/100) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x9a000, 0x0) write$P9_RREMOVE(r4, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 601.529378][T27576] QAT: Invalid ioctl 15:44:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000040605000000000000000000030000040000010007000000090002008c797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4a0) 15:44:02 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/19, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x3f}, 0xfffffffc}, 0x1c) listen(r0, 0x4) socket$inet6(0xa, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) [ 601.836976][T27576] QAT: Invalid ioctl 15:44:02 executing program 4: socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x0) r1 = open(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)={0x8d, 0x2, 0x4, 0x20000000, 0x6, {r2, r3/1000+10000}, {0x6, 0x8, 0x6, 0xdd, 0x20, 0x0, "fd953622"}, 0x1e53, 0x3, @userptr=0x80000000, 0xcb1c}) getdents64(r1, 0x0, 0x352) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x0, 0xb, "7a14ed6ffc9f033669a495c390ac5b0d56266f"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}}, 0x20048044) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet(0x2b, 0x801, 0xff) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r8 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f00000001c0)={'ipvlan1\x00'}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="62726f75746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b95df292ff0a1ba0000000000000000000000000000000000000000000000000000e2540ddb2573c2eff888996382565e4d757e7959e67fb0e68c4b90e62108a8b411650787403fc7933f2bb10d93b3046fd5d18283a5a326168a656606792ae92eb719a5e4e6610b17309d266ce93db3ef54f2fbcaed7728de78416631ae074b9609bdec"], 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$sock_netdev_private(r9, 0x89f3, &(0x7f00000007c0)="16dc83c8821593f32e116021f20e8e40c4242a2b48bf051fa335bc7f5b0bc36d6519017b3821c165aff6a8b840c028643c2a022db763892b4cda05e046b8918602845fa13401f2fdc70e9061a24d3b7d3459c159363d167e6dbb5b8ff322cb2bbd45d56aab998f0565301cb0352b443144f1bd0eb9b7d1c02482bb89aa3c5a103765a1b44e370c76d5235c06a20e12f760bcdbd1aa6976ed733a079616da93dd9b9e57328c76b3934df8a517854164a582a851d8a37d075dbe6ddeb5f02046eb1d3c1ad5adc7b178338cc1") ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x1, 0x2}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r5, 0x0) unshare(0x60020000) 15:44:03 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/19, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:03 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$P9_RMKNOD(r3, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x80, 0x1, 0x4}}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x7}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 602.320962][T27664] IPVS: ftp: loaded support on port[0] = 21 15:44:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000040605000000000000000000030000080500010007000000fd00020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:03 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x8000) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000000c0)) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:03 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/19, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 602.881000][T27717] x_tables: duplicate underflow at hook 2 15:44:04 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002280)='/dev/hwrng\x00', 0x12000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002300)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:04 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:04 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x3, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000100)) ftruncate(r4, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000040)) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008050}, 0x20) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:04 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x0, &(0x7f0000000180)="978f26b69b9a3ddff3930fbdd6db5701b605a88c7ec745460877acd62e15a5f4e1c2c756f1689eaeac4e6f441a0310d55f853a409616eeca3bae6834aa0b795dc68f897d47297152b4d652fa1a5060c2d92c592ba05d3398043f3150f5df5ec00f0db557e18a1ba324be9135db6ed5864299e716d3fddb10dcf1ff249378e2027af08b1f437a3bb1ce191546b1e2eeb5c7f54d55e64f102c31748114bbd583bb50b54979"}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 15:44:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000deff0007000000000000000000000000000000000000000000000000000000000000004991effa01294a603318ab376829debb0ccc89f4b9ad0738fee405d760f8d7c153a89576c79463710d9a654c69daec6b70a2e9a37ea76a96f3a3539275afaf26f80320c6515bd4214d8f8882c5b7878d0a35a40eea9e44251d5afc6ba993d04a7b017d522d5af3db9c038bbcfb229d1c7bf87c5885580d9802e005d5c9ea2f1166f1f3da295b77670f91d452a26296baeea6bec674b45abdbc6fef9b38dd474ffea43e81debdabfc7317469be51b75602b843b1465e725b6c94fe706b44ac8a1840fb8adc8e2ce16c56b82ae998a3f3cf341c730ef200b1b74f3"], @ANYBLOB="fe8000000000000000000000000000bb00000000000000000000ffffac1414bbffffff00ff000000ff000000ff000000000000ff000000ff00000000000000006970366772653000000000000000000069705f76746930000000000000000000ff000000000000000000000000000000000000000000000000000000000000002b00200508000000000000001801400100000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000000104000003010400090000000104da000800810009000700aa000600000400000400200008000c0028006d68000000000000000000000000000000000000000000000000000000007b2901000000000028004e465155455545000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800180100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000100000001000000050000002001000040004c4f47000000000000000000000000000000000000000000000000000000071011eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0001801000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000e74db010000000048004c454400000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000010200000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a0) 15:44:04 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:04 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='ip6_vti0\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x84000, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) [ 603.652033][ T276] tipc: TX() has been purged, node left! [ 603.715704][T27844] x_tables: duplicate underflow at hook 2 [ 603.753319][ T276] tipc: TX() has been purged, node left! [ 603.891996][ T276] tipc: TX() has been purged, node left! 15:44:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00070000de72ccdf060000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x40801) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5cc491e6", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf25040000001400080076657468305f6d6163767461700000000c001600000000800000000006000e000000000008001800ffffffff060001000000000006001b004e2400000500050001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = epoll_create1(0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000380)) r4 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 15:44:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4605ffffffff7f00000000001000000000000000000000000090fcffff000000000000000000002000000000000000005133149f00"], 0x23) 15:44:05 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x9, 0x7, 0x4, 0x302}) 15:44:05 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000340)={0x2, &(0x7f0000000280)="04116649d3f985a2b6c63ae164aedcf00918168da3ea99f3aad49526c622a08feb573cd51e3ffe711618e5b49a6f4f057f83e3a576a6af86ebdd4bc8dbbb71861a8b331a0e552eb45b3e7816917bdbd8a36525e3ddd8e8901ae5759cf0a89586fdc23c74dcf1558c9a12a364d7af1ce4286ae6473ea8e4c0ce1314aea221c18e2b91ef98fea97771097d049a47d675c0d2f0c27ce7914e5ddb4774ebfae41737c5c536d53b26a98e7591c373915967879fdd5daf9dbb428050f0"}) ftruncate(r1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='vlan0\x00', 0x0, 0x3, 0x5}) listen(r0, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x81, 0x6b}, {0x8, 0xc1}, 0xbf2, 0x2, 0x7e}) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x80000, 0x3f) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() syz_open_procfs(r7, &(0x7f0000000080)='comm\x00') r8 = syz_open_procfs(r7, &(0x7f0000000380)='task\x00') setsockopt$inet6_MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000000480)={{0xa, 0x4e22, 0x4, @rand_addr="5fdaa81a783fe2da3974bd9ef75e5876", 0x2}, {0xa, 0x4e24, 0x0, @remote, 0xfffffffd}, 0x1000, [0x1, 0x5, 0x1000, 0xff, 0x8000, 0x5, 0x4, 0x5]}, 0x5c) close(r6) ftruncate(r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r9, 0x4}}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 604.293408][T27972] x_tables: duplicate underflow at hook 2 15:44:05 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000240007a75cb27fec4b024ea8d27a0500", @ANYRES32, @ANYBLOB="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"/288], 0x60}}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x80000000, @remote, 0x4}, {0xa, 0x4e21, 0x592, @loopback, 0x7}, 0x0, [0x8, 0x1, 0x7f, 0xfffffff9, 0xdaa6, 0x0, 0x80000000, 0x49]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000640)=[@op, @iv={0x26000000, 0x117, 0x2, 0x0, "fd0d41fc2c4bc9d4bb0d46321159c4697f45ee5b6acd70f016037816"}, @iv={0x0, 0x117, 0x2, 0x0, "1b64f4f97e8d1eb0c267b31c4a058cda764b125403c11f370d6fb2e0b1983fa302c4abc702e9d9c3087eb82aca852bd1fc3ca47ae45dd58b0e8a53ad5f3b83ed68a9100e1145353afae2bf7df4d49a08a51ebeed0e7727"}, @iv={0x0, 0x117, 0x2, 0x0, "5d09b3391fbe215e295e74f2ddc1811ea979105c3268a7859d361a9f54b04555ba34c6d690d05346aa00bffc2d14700f7f19ef9f8e1af6dcd9dadcf7d587c41c34cf7578bec351df89c3c1e7269a709808e8c08a53ac38cfa79f74b64c5385bd2caf954afb76b5de293ff37b142432f397eb436e114910b7a2b7ee9ed96b68bc3c44e4a2d1f82d4415c18c5dc04ef94eed1e38bea0397005eb9d3329fd805fcd5fe4b64d39530006d63cdf23d4ebd2f5dcd5742958a8feb383958365b96db6b40144fdf664d2d4974bd6d46eb89fd77558e8ea3a143394795e075a181e19608295ba3f03776e00da7835b6fb78dbf30d"}, @iv={0x0, 0x117, 0x2, 0x11, "f34ed32e0fefd9451c9495032ebb997936c7f7c5d96554ab78f8af9f226af05d909679888b81689eceb8"}, @assoc]}], 0x924924924924adf, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000040)={0x7, 'batadv_slave_1\x00', {0x1}, 0x3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x4, 0x4) 15:44:05 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000ac0)={0x14, r6, 0x7d7f282ad3c7b35}, 0x14}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) ftruncate(r15, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r16) ftruncate(r16, 0x0) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000006300)=0xe8) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r19, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000006400)={@rand_addr, @local, 0x0}, &(0x7f0000006440)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r23) ftruncate(r23, 0x0) accept4$packet(r23, &(0x7f0000006480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000064c0)=0x14, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000006780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006740)={&(0x7f0000006500)={0x214, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x0, 0x8, 0x40}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x72d1}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3c60}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xbf92}}}]}}, {{0x8, 0x1, r24}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c050) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000000)='\x00'/20, 0x14) 15:44:05 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x2, 0x2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r3, 0x9) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000180)) write$capi20(r3, &(0x7f0000000140)={0x10, 0x20, 0xff, 0x82, 0x9, 0x5}, 0x10) 15:44:05 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 604.816738][T28072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 15:44:05 executing program 2: ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_unlink(&(0x7f0000000000)='vboxnet1-.md5sum\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000400400005802000040010000400100004001000000000000700300007003000070030000700300007003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000003044e2ac0000000000000000000000000000000b9200000000"], @ANYBLOB="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"], 0x4a0) [ 604.973537][T28072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.005461][T28104] x_tables: duplicate underflow at hook 2 15:44:06 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x4004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000100)={0x8001006, 0x9, 0x3}) close(r6) ftruncate(r6, 0x0) connect(r6, &(0x7f00007a8000)=@rc={0x1f, @none, 0x7f}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @empty}, 0x1c) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x1, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x101402, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000280)={0xa20000, 0x6, 0xffff, r9, 0x0, &(0x7f0000000240)={0x990afd, 0x7, [], @p_u8=&(0x7f00000001c0)=0x8}}) ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000180)={0x3, 0x6, 0xfffffffffffffff3}) [ 605.121575][T28072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 15:44:06 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='S'], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000000201040000000000000000000000003c0002802c000180140003004523d167bcb10aa8c37000000000000014000400fe8000000000000000000000000000000c00028005000100000000003c0003802c00018014000300fe88000000000000000000000000000000000000000001070002800500010000000000300001802c00018014000300fe8000000000000000000000000000bb140004000000000000000000000000000000000100"/188], 0xbc}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) ftruncate(r12, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x10, 0x3, 0x40) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r19, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28cf879ce60c27488f650001193ab4057f67c9e7d9a0dca70800000000000000", @ANYRES32=r21, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r22) ftruncate(r22, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r22, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r24) ftruncate(r24, 0x0) getsockopt$inet_mreqn(r24, 0x0, 0x20, &(0x7f0000000340)={@loopback, @broadcast, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @remote}, &(0x7f0000000400)=0xc) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) r29 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r29, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r28, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r30}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000f1000ff0706000000ff0000002c000000", @ANYRES32=r30, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r32, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r34}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000a19adfa4fc9772ca21c4f0000000", @ANYRES32=r34, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r35) ftruncate(r35, 0x0) getsockopt$inet_mreqn(r35, 0x0, 0x23, &(0x7f00000018c0)={@dev, @remote, 0x0}, &(0x7f0000001900)=0xc) r37 = socket$netlink(0x10, 0x3, 0x0) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r39, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r38, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x2000c0d0) sendmsg$nl_route(r37, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001080000000000216248c7000000", @ANYRES32=r40, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) r41 = socket$netlink(0x10, 0x3, 0x0) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r44}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r41, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r44}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r45 = socket$netlink(0x10, 0x3, 0x0) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r46, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f80)={&(0x7f0000000ac0)={0x640, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r21}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x3, 0x3, 0x95, 0xc5b}, {0x6c, 0x6, 0x8, 0x2b8}, {0x1, 0x20, 0x4, 0x6}, {0x0, 0x2, 0x4, 0x4}, {0x4c, 0xd4, 0x4, 0x80000000}, {0x76b7, 0x6, 0x6e, 0x10001}, {0x9, 0x3, 0x0, 0x7ff}, {0x8, 0x1, 0x3, 0x9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r25}}}]}}, {{0x8, 0x1, r26}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r34}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r40}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r48}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xec}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r44}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x8010}, 0x4000831) [ 605.332565][T28197] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.422706][T28216] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.435811][T28099] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 15:44:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 605.486364][T28216] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 15:44:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) [ 605.577273][T28222] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.645120][T28216] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 15:44:06 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x3f, 0x8000, 0x4, 0x5, r7}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:06 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 605.734076][T28228] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.800958][T28233] x_tables: duplicate underflow at hook 2 15:44:07 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) readahead(r0, 0xf4c, 0x8) r1 = epoll_create1(0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x90200, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 15:44:07 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1d000000040605000000000000000000030000080500010007000000094b376976cfd50352cbbcc7b9121d834fa208bb40666430cf00db243c942aab83e59492d18963c3c5e7d0e3e914e9ae48507c6cbe6c3324be00a73619b52154bcf4873f2a49f82a0164a9456d427b1c8f35d471215017b4aa790087dc75eaf16841dd2b20d55fa989a45d015078ec8635f70b08f9512c68c95e0d6834905a0395a0fa5241ea307f535c6ba9330c28a9cdaaaad1c14a393b131ad76e7940e5d40ea9bf327aa51bf1686d9be1fcccf6b4ca6fd678c182a8e729bade6fd674053a5025439a8222feec"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=ANY=[], 0x0) 15:44:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newsa={0x18c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in6=@rand_addr="02ed4d73062b85e8a45dfa2e6a347805", 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}, @replay_val={0x10}, @replay_esn_val={0x1c}]}, 0x18c}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x40) 15:44:07 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x1}) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x6000, 0xc000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002100200012800b0001006272696467650000100002800a001400aaaaaaaaaa000000"], 0x40}}, 0x0) 15:44:07 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:07 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:08 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) sendto$inet6(r1, &(0x7f0000000100)="af53faf078f1f1742d691f038f99c2d1e84d57abfcab22bd79a863f057e84400a57decb61f3d96c4cd96de6d71a73552c33ef52a7e54bf1441bf4ee579ed539906921550b3385541f011cea50310356940f3a33bc1da319dd4c4b9d796f522bf53949cbcf3e474cb102a4d", 0x6b, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffff, @loopback, 0xfffffffb}, 0x1c) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x10001}, 0x16, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={@rand_addr="b1106ac70eaa6e28498c349f208aeb86", 0x61, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:08 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0xffffff0f, 0x3, 0x0, {}, [@IFLA_LINKINFO={0xffffff30, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0xb4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) getpeername$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xa00, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x9) [ 607.390162][T28508] x_tables: duplicate underflow at hook 2 15:44:08 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) r6 = openat(r5, &(0x7f0000000040)='./file0\x00', 0x800, 0x60) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2c8180, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400040, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200), 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wireguard0\x00'}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) readv(r10, &(0x7f0000000500)=[{&(0x7f0000000140)=""/208, 0x3}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/213, 0xd5}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="950000000000000018280000", @ANYRES32, @ANYBLOB="0000000007000000cc0b060004000000950000000100"/32], &(0x7f0000000100)='syzkaller\x00', 0x9c70, 0x0, 0x0, 0x40f00, 0x5, [], r9, 0xd9591b52c46ed0b3, r10, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000008000000000100000018150000", @ANYRES32=r3, @ANYBLOB="000000000000000018250000", @ANYRES32=r4, @ANYBLOB="0000000020100000950000004409c7a09cf31559888759957fc4f2c948877a0c1a84f3853bceec338dd47fd1ca17025634442c10476af045c6a8dd09f899b5c7cc0bc9895ea7b45adbe4b7f6634ed08c2f118a24cda5bd7c4ba65a1874070aa1663202d57d8c84c583556ccfb99dc0fcb0d097690e8bc5e0ddbb46492b23e7c75971e53375d6eeef7c9fbbebdf"], &(0x7f0000000300)='GPL\x00', 0xfbb, 0x0, 0x0, 0x41100, 0x0, [], r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x8, 0x3}, 0x10}, 0x70) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r11, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="00000000ffffffff00000000240008f81c00010000002000000000000000000000000000000000000000000004000200"], 0x2}}, 0x0) r17 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) readv(r17, &(0x7f0000000500)=[{&(0x7f0000000140)=""/208, 0x3}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/213, 0xd5}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="950000000000000018280000", @ANYRES32, @ANYBLOB="0000000007000000cc0b060004000000950000000100"/32], &(0x7f0000000100)='syzkaller\x00', 0x9c70, 0x0, 0x0, 0x40f00, 0x5, [], r16, 0xd9591b52c46ed0b3, r17, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x401, 0x5}, 0x10}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x5, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000300)='GPL\x00', 0xfbb, 0x0, 0x0, 0x41100, 0x0, [], r16, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x8, 0x3}, 0x10}, 0x78) r18 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r19 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r19, 0x4) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r21, 0x0, 0x0) sendmsg$nl_route_sched(r20, 0x0, 0x0) r25 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/208, 0x3}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/213, 0xd5}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000007000000cc0b060004000000950000000100"/32], &(0x7f0000000100)='syzkaller\x00', 0x9c70, 0x0, 0x0, 0x40f00, 0x5, [], r24, 0xd9591b52c46ed0b3, r25, 0x8, &(0x7f0000000140)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x401, 0x5}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1}, [@map={0x18, 0x5, 0x1, 0x0, r18}, @map_val={0x18, 0x5, 0x2, 0x0, r19, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000300)='GPL\x00', 0xfbb, 0x0, 0x0, 0x41100, 0x0, [], r24, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x8, 0x3}, 0x10}, 0x70) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r26 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r26, 0x4) r27 = socket$nl_route(0x10, 0x3, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r31}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r28, 0x0, 0x0) sendmsg$nl_route_sched(r27, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r31, @ANYBLOB="00000000ffffffff00000000240008f81c000100000020000000000000000000000000000000000000000000040002"], 0x3}}, 0x0) r32 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) readv(r32, &(0x7f0000000500)=[{&(0x7f0000000140)=""/208, 0x3}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/213, 0xd5}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="950000000000000018280000", @ANYRES32, @ANYBLOB="0000000007000000cc0b060004000000950000000100"/32], &(0x7f0000000100)='syzkaller\x00', 0x9c70, 0x0, 0x0, 0x40f00, 0x5, [], r31, 0xd9591b52c46ed0b3, r32, 0x8, &(0x7f0000000140)={0x9}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x401}, 0x10}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x5, 0x2, 0x0, r26, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], r31, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x8, 0x3}, 0x10}, 0x78) r33 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r34 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r34, 0x4) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$netlink(0x10, 0x3, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r37, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r36, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r39, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r35, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="00000000ffffffff00000000240008f81c00010000002000000000000000000000000000000000000000000004000200"], 0x3}}, 0x0) r40 = syz_open_dev$vcsa(0x0, 0xfff, 0x0) readv(r40, &(0x7f0000000500)=[{&(0x7f0000000140)=""/208, 0x3}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/213, 0xd5}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="950000000000000018280000", @ANYRES32, @ANYBLOB="0000000007000000cc0b060004000000950000000100"/32], &(0x7f0000000100)='syzkaller\x00', 0x9c70, 0x0, 0x0, 0x40f00, 0x5, [], r39, 0x0, r40, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x401, 0x5}, 0x10}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map={0x18, 0x5, 0x1, 0x0, r33}, @map_val={0x18, 0x5, 0x2, 0x0, r34, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000300)='GPL\x00', 0xfbb, 0x0, 0x0, 0x41100, 0x0, [], r39, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x7, 0x8, 0x3}, 0x10}, 0x70) r41 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r42 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x288c82, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r42, 0x4) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r44, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched(r43, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r46, @ANYBLOB="00000000ffffffff00000000240008f81c00010000002000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) r47 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) readv(r47, &(0x7f0000000500)=[{&(0x7f0000000140)=""/208, 0xd0}, {0x0}, {&(0x7f0000000380)=""/213, 0xd5}], 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1}, [@map={0x18, 0x5, 0x1, 0x0, r41}, @map_val={0x18, 0x5, 0x2, 0x0, r42, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000300)='GPL\x00', 0xfbb, 0x0, 0x0, 0x41100, 0x0, [], r46, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x3}, 0x10}, 0x70) 15:44:08 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x800, 0x3ff, 0xfffc}) socket$inet6(0xa, 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:08 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc4000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) r2 = dup(r0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x140032, 0xffffffffffffffff, 0x0) 15:44:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="070000000406050000000000000000000300000805000100070000000900020073797a32000000006e3c0ef29d4b14177b8b9b169cdb1ecf2a813b1452e6bcaa8df0f94f012e5500945dd9a28399fa4483e5b1dd07506de57a05"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:09 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="5d000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000baa45a6521c19a3ff5237103466567089060d34096968e96b4db226e8436d4457931c54648d8a4895ff4de4cae068b03401846f2004d62c78e1519f14651bac846c35e6d9dbdaccbae577ac3c928eec1331be552bb63aee88e8828891e871ad41c38fd5a428b1b27bb290244ce1654558ec57eceda9071b181c645a10f081a27c02dde8efccf88b3c73a3fe9c2846c44f5e70003d1033b1d2b2a2131eb12762640bcf91ef999ce8463e79e0ce7d866a2f692ed6fcc121f7ec930f19abd1ef19b76a9e9054f4d84e85cc15d8c018368314649e50549fc7258d78b6b9a113a501645e97bbd768d0ec8c021d70bb90d635657bf51a7c5e0bfed71178b3600"]) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x3, 0x1, &(0x7f0000000080)=""/45, &(0x7f00000000c0)=""/29, &(0x7f0000000200)=""/73, 0x2}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "04835082f6c8d3dd2c433d5754a0820dc1797b"}) sendto$inet(r1, &(0x7f00000002c0)="90665f2719ea3ebce6676a7f318f5d56db922d861cb376578a5bdca69a77c82ad679ffb2888c292528633e23f70385e7ad5af8bd16bbcdf84e67bf131b9db01cc7bc14e006aa8adeaa50d671809a63b3b19960dc9309c17231dc42b1324441f6222b216846e6e6d0cf38aec019b600540a3fa78e6a847315f09e05a7253cd6bf73d9931ff80de895f60eb8d04ca580c2df1e2f728c1f3f1cdf745b9235a51ec7dae50197ba0dbfaf4523272b5d69e913f0", 0xb1, 0x4, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x900) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000280)=r3, 0x4) [ 608.253122][T28645] x_tables: duplicate underflow at hook 2 15:44:09 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000140)={0xa0000000}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:44:09 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000180)={@host}) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x1, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa2095b, 0x7, [], @p_u32=&(0x7f0000000040)=0x1}}) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) r6 = accept4(r5, 0x0, 0x0, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$l2tp(r1, &(0x7f0000000140)=""/39, 0x27, 0x3bcae7e2b1ab24d1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 608.976842][T28778] x_tables: duplicate underflow at hook 2 15:44:10 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1a, 0x19, 0x103, &(0x7f00000003c0)="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"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:44:10 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x191100, 0x0) 15:44:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x440900, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r3, &(0x7f0000000400)="2e921a4578c22b9eb4e008e9361707f192ccf3481ad33b9298d545ac29ad33a8e2507ddb3bfecd1c94df71ad34026c4343e2a0e1c600e60ddafb", &(0x7f0000000480)=""/102}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000700)='/dev/vcs#\x00', 0x9, 0x2b00) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000740)={0x2, [0x0, 0x7]}, &(0x7f0000000780)=0x8) write$binfmt_script(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2321202e2f66696c6538206c32747000200a2348abea98626a03fd4b56025f1b82995125bed50778c0a675ae1070a660210942a5c5d8fe8b6428f245da4d6302abcd00ff681e3e0205ed33fe8768ab45d6d170e76325906cefeab57e35083e4ca820e34e40ace134c50e158d9d22d0fe5c73605a963b1d61304769a44a2cd5c43218a2535a52a87d1e038d79c876e2c011cf7349592b448d8e66c31b6c8eada14271b2130e655166beaa3e85fb60859d1852225e21857b340d2f3ad98d20f5342a0d7efbef8f344599a7841931f693f9fb7ec0d6535d1f6e4a62f0d16c5cdfa5092c"], 0xe2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00070000de72ccdf060000000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000850}, 0x40801) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x2, 0x400, "9948773d1c39eab8c84ff3a484d7c13a3bb332fc3af5543abe52b2a2819e414659eed22343a4fda66f82b4faa0a1d273c3b14d7fa59b66db13c68019f0037e8633e9abdcbd884f8840bd8717039ca836fb3be5a4854d651719f73a3d2fd3f36196a522efc412403b2898af79091d34ecf791f1ad424be4b7fd7e47e95e2e4a6ad030e7ef845f7723945458937631e9abbc71451ba1039cbe5eba65f9e941cb0e47598535372de15033b2dff899da5f62de326fd08a5cc9cb3a33c19aa45d8fea4c415ead444636806929b47918c53f11332ad1aad4b20e03dfe42cde47878a11509492fa980600b20163eede83db88ce2d3ebd94b545664b9c7d56da4cea8524", 0xba, 0x1, 0x6, 0xff}, r8}}, 0x120) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {r8, 0xc0, "b1074e", "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"}}, 0x110) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f00000003c0)={0x9}, 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0x6c, r2, 0x100, 0x70b927, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000005}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfa6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040080}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000032001901000000000000000002000000ffd38d9b0c00010008001000040010004408a59b62df63bcf442b1e941c2e07983f2d3ecf794bfdf8536e4c238bbccedeb48820dba7e44f77104c3fca85b5b8a11be1cea7cd1098d04e0c2cae1afddf6082ca9d6df9f071489b269cd77e9498ca0"], 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast2}, 0x9}}, 0x0, 0x0, 0x4a, 0x0, "2ef988f2f722a6345ff5462fa3e72207be20dc5f077a854825b7373290528b6c6024ba5c7c60abe1fa1032c4446a3c73660bc4ab57fd2ab2c83b5205f3a1bdb59fc97ce0fa9bc1a79877c11c616c7524"}, 0xd8) dup(r0) 15:44:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 15:44:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r3, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}}, 0x4080) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 609.631945][T28899] openvswitch: netlink: Either Ethernet header or EtherType is required. 15:44:10 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) exit_group(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 609.775619][T28899] openvswitch: netlink: Either Ethernet header or EtherType is required. 15:44:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000080)="91", 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000006c0)={0x4, 0x8, 0x4, 0x20000000, 0x200, {}, {0x1, 0x8, 0xc0, 0x80, 0x7, 0x1, 'Z~uF'}, 0x7, 0x3, @offset=0x6, 0x8e, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}}, 0x4080) munlockall() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf25140000000b001300bb1e8f318c5b73000e00bd000800070032010400000000000a000600aaaaaaaaaaaa00001e00130059846982c0e0f7fbf215377f4d0c646009d9d358c53eeab2baa90000060010006900000008001400", @ANYRES32=r5, @ANYBLOB="820ce5515509d110dada156ec46c87b9c8af4695f3195c4a283bd356848b8c88312c4941a7def0052e61a8d47c4d60c23651ce1af1266005a0fa7b8750ca1209c70f4f9878a376a8ddae7680"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/103, 0x67}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/177, 0xb1}], 0x9) 15:44:10 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000040)=""/183, &(0x7f0000000100)=0xb7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 15:44:11 executing program 5: r0 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x4) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='vboxnet1system\x00', 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x2, 0x7, 0x801, 0x0, 0x0, {0x148fc5cb03717078, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4000000) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/7, 0x7) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 15:44:11 executing program 0: accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) getgid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:44:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x9, 0xa, 0x4, 0x1000, 0x6, {0x0, 0x2710}, {0x4, 0xc62796f281654f73, 0xff, 0x91, 0x0, 0xe8, "9bd63a21"}, 0x0, 0x3, @offset=0x761, 0x1, 0x0, r1}) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000d80)={[0x8, 0x4a3, 0x3ff, 0x5, 0x2, 0x7, 0x0, 0x7, 0x9, 0x400, 0x800, 0x3, 0xffffffc1, 0x100, 0x0, 0x1112, 0x100, 0x10000, 0x650380ff, 0x8, 0x4, 0x20, 0x0, 0x3, 0x81, 0x0, 0x2, 0x1f, 0x8, 0x1, 0x3, 0x5, 0x6, 0x81, 0x8000, 0x633d, 0xfffffeff, 0x1, 0x7, 0xfffff001, 0x3fca, 0xffffff01, 0x7, 0x4, 0x10001, 0x6, 0x7, 0xfffffff9, 0x8, 0x0, 0x2, 0x6, 0x5, 0x2, 0x8, 0x5, 0x1, 0x61, 0xe4, 0x8000, 0x4, 0x1, 0xfffffff9, 0x7, 0x7fffffff, 0x2, 0x1, 0xffffffff, 0xa8b, 0x83, 0x20, 0x3, 0xf5, 0x101, 0x101, 0x80000001, 0x5, 0x9, 0x8, 0x7, 0x4, 0x7f, 0x7fffffff, 0x1000000, 0x4, 0x5, 0x80, 0xffffffd5, 0x69ae, 0x4, 0x2, 0x4, 0x4, 0x3, 0x2, 0xffff, 0x10001, 0xffffff01, 0x5, 0x81, 0x9f, 0x101, 0x1, 0xfffffffb, 0x2, 0x0, 0xeb7, 0x200, 0x7bef5bde, 0x3ff, 0x1ff, 0x1, 0x8, 0x4, 0x20, 0x1, 0xfffffeff, 0x9, 0x7, 0x3, 0x101, 0x8, 0xffffff7f, 0x7ff, 0x0, 0x10001, 0x9, 0xfffffd13, 0x0, 0x1f, 0x2, 0x1, 0x4, 0xdc8, 0x78e882fa, 0xd2, 0x6, 0x90, 0x7, 0x8, 0x8000000, 0x1, 0x80, 0x6, 0x100, 0xd2, 0x8, 0x9, 0x6, 0xffffffff, 0x10000, 0x6, 0x4d15, 0x9, 0xffffffff, 0x8, 0x1, 0x0, 0x2, 0x0, 0x1, 0x10000, 0x5, 0xfffffff8, 0x3, 0xffff, 0x3, 0x3ff, 0x9, 0x9, 0x20000000, 0x1ff, 0x9c2, 0x3, 0x10000, 0xb36, 0x1, 0x7fff, 0x5, 0x2, 0x3fa2, 0x3, 0x7de, 0x6, 0x10001, 0x10, 0xfffffffc, 0x101, 0x6c320000, 0x100000, 0x6, 0x1, 0xffffffff, 0x8001, 0x5, 0xfffffffd, 0x2, 0x7, 0x7, 0x1, 0x7, 0x0, 0x1, 0x9, 0x0, 0x6, 0x4, 0xfffffe01, 0xc8, 0x1, 0x8, 0x10001, 0x8, 0x464, 0x1, 0x8, 0x9, 0xa4a2, 0x2, 0x8000, 0x8001, 0x4, 0x200000, 0x204, 0x3, 0x6, 0x5, 0x2, 0x8, 0xd5, 0xdb, 0x10001, 0x9, 0x4, 0x5, 0x7, 0xe6, 0x4, 0x3, 0x8, 0x0, 0x0, 0x0, 0xc7, 0x7, 0x81, 0x0, 0x9, 0xf231, 0xfff, 0x3, 0x82, 0xfffffbff, 0x6, 0x1, 0x491, 0x3f, 0xb82, 0xffffffff, 0x691, 0x3f, 0x3eda, 0x9, 0x3, 0x7fffffff, 0x8, 0x4a, 0xfffff259, 0x29, 0xf6, 0x6f860000, 0x3, 0xde, 0x3cb, 0x4, 0x1, 0x40, 0x81d5, 0x10001, 0x3c4, 0x8, 0x5, 0x8, 0x3860, 0x9, 0x10001, 0x101, 0x1, 0x3, 0x4, 0x1000, 0x7fff, 0x1, 0x7fff, 0x5e2c6011, 0x15e, 0x6, 0x7fffffff, 0x0, 0x9729, 0xffffffff, 0x0, 0x1, 0x0, 0xfffffffa, 0x8001, 0x3, 0x8, 0x4a, 0x200, 0xfffff282, 0x6, 0x4, 0x1, 0x4, 0x0, 0x4, 0x7ff, 0x7, 0x3f, 0x9000000, 0x7, 0x3db, 0x1, 0x5314, 0x9, 0x5, 0x8, 0xfffff298, 0x2, 0x8, 0x5, 0x4, 0xffff, 0x3, 0x1, 0x2, 0xfffffffb, 0x3, 0x3, 0x1, 0x7fff, 0x2, 0x1, 0x80000000, 0x7, 0x5, 0xffffffff, 0xfffffff9, 0x5, 0x2b9, 0x4, 0x7, 0x1, 0x6a1, 0x7, 0x80000001, 0x6, 0x8f, 0x8, 0x7fffffff, 0x5, 0x4, 0x1f, 0x0, 0x0, 0x7ff, 0x79d8, 0x6, 0x1, 0x6, 0x100, 0xf4, 0xffff0001, 0x9, 0x4, 0x1ff, 0x100, 0x8, 0x3, 0x100, 0x3, 0x0, 0x5, 0x7, 0xb6f5, 0x7, 0xfffffffd, 0x3, 0x8, 0x0, 0x1, 0xfffffff7, 0x10000, 0x3, 0x9, 0x6, 0x10000, 0x6, 0x7ff, 0x4, 0x9, 0x1000, 0x3f, 0x9, 0xf8, 0x4, 0x9, 0x1f, 0x1, 0x7, 0x85, 0x1, 0x597, 0x9, 0x8, 0xe74, 0xffffffff, 0xfffffffa, 0x2, 0x401, 0x2, 0x3, 0x5, 0x4, 0x7, 0x3b, 0x800, 0x7, 0x7fffffff, 0x2, 0x10001, 0x2278, 0x3c, 0x6, 0x26ea7ae, 0xeb40a251, 0x3924, 0x2, 0x2, 0x20, 0x3, 0xfffffffe, 0x1, 0x9, 0x0, 0x6, 0x8bb46c4, 0x1, 0x4, 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x4, 0x0, 0x80000000, 0x5, 0x40, 0x8, 0x4, 0x0, 0x4, 0x0, 0x80000000, 0xb0000000, 0x5, 0x8, 0x81, 0x7, 0x80, 0x41b, 0x935e, 0x36d2, 0x1, 0xc823, 0x1ff, 0x0, 0x80, 0x1, 0x401, 0x7, 0x0, 0x2c3, 0x4, 0x6, 0x3380000, 0x75e7, 0x7, 0x100, 0xfbcc, 0xfffffffa, 0x9, 0x6, 0x8, 0x0, 0xffffffc1, 0xf3, 0x6c8, 0xff, 0x0, 0x4, 0x6, 0x40, 0x1, 0x9, 0x6, 0x20, 0x1, 0x2, 0x1, 0x8, 0x21, 0x3, 0x2, 0x7ff, 0xb867, 0x2, 0x1f, 0x6, 0x1ff, 0x6, 0x1000, 0xb7a0, 0x42, 0x13d5, 0x1, 0x80000001, 0x3, 0x1, 0x1ff, 0x5, 0x800, 0x6, 0x1, 0x1800, 0x80000000, 0x7fff, 0x8, 0x3eb1, 0x8, 0xffffffff, 0x401, 0x18b, 0x5, 0x8ac3, 0x10001, 0xfff, 0x3ff, 0x9, 0x1000000, 0x0, 0x8001, 0x81, 0x3, 0x3, 0x40, 0x8, 0x0, 0x2, 0x7ff, 0x40, 0x5, 0xffffffff, 0x7, 0xfffffffc, 0x6, 0x9, 0x2, 0x3, 0xc1, 0x80, 0x1, 0x80000000, 0x8000, 0x7fffffff, 0xa25, 0x5c3, 0x3f, 0x6, 0x7, 0x10001, 0x7, 0x9, 0x2c9, 0x0, 0x3f, 0x80000001, 0x0, 0x6, 0x4, 0x6, 0x9, 0x5, 0x7ff, 0x800, 0xb269, 0x2, 0x4, 0x9c08, 0x2, 0x6, 0x6, 0x2, 0x0, 0x7ff, 0x20, 0x5, 0x9, 0x10001, 0x4, 0x3, 0x86, 0x3, 0x401, 0x3f, 0x6, 0x9, 0xff, 0x0, 0x5, 0x8, 0xdf, 0xf66e, 0xe9, 0x0, 0x0, 0x7f, 0x7f, 0x6, 0x8, 0x47, 0x2, 0xfff, 0x8, 0x80, 0x4, 0x9, 0x7, 0x7fff, 0x3f, 0xf, 0x8278, 0x0, 0x9, 0xd3, 0xf8, 0x9, 0x6, 0x6, 0xb1, 0xffffffff, 0x4, 0x3, 0x5, 0x4, 0x2, 0x7f, 0x800, 0xee73, 0x1, 0x6, 0x0, 0x4, 0x3f, 0x0, 0x9, 0xff, 0x60e, 0x8, 0x6d3, 0x3, 0x3b, 0x3, 0x8, 0x7, 0x20, 0x8, 0x7, 0xc, 0x1f, 0x5, 0x7, 0x7fffffff, 0x3f800000, 0x7, 0xf1f, 0x2, 0x835efaa, 0x0, 0x1, 0x9, 0x2, 0x800, 0x3d, 0x5, 0x7, 0x8d, 0x2, 0x400, 0x4, 0x6, 0x5, 0x2, 0xdb8, 0x3, 0x0, 0x1ff, 0xfffffffb, 0xcb, 0x2, 0x7fffffff, 0x1, 0x3, 0xff1f, 0x80000001, 0x400, 0x7, 0x98, 0x3, 0x5, 0x7, 0x2, 0x68, 0x5, 0x7f, 0x7, 0x81, 0x4, 0xfffffa29, 0xaa, 0x1, 0xfff, 0x8, 0x4, 0x10000, 0x6, 0x3, 0xe5, 0x7, 0x1000, 0x3f, 0x7, 0x3, 0x6, 0xa8, 0x2, 0x2, 0x62, 0x3, 0xb, 0x7, 0x62a, 0x20, 0x3, 0x9, 0x4, 0x4, 0x8000, 0x9, 0x3, 0x401d, 0x5, 0x6, 0x10000, 0xd570, 0x2, 0x18, 0x9, 0x7f, 0xdae, 0x4, 0x100, 0x80000001, 0x9, 0x3, 0x9, 0x1, 0x7, 0xd7, 0x944b, 0x4, 0x1, 0xc8, 0xfffffff8, 0xa248, 0x1, 0x5, 0x6, 0x0, 0x3, 0x401, 0x7, 0xffff0001, 0xbb6, 0x40, 0xcc, 0x9, 0x38b, 0x6, 0x7, 0x9, 0x1000, 0x1, 0x5, 0x94, 0xcc32, 0x7, 0x1, 0x19d9, 0x7ff, 0x8, 0x101, 0x8001, 0xfffffffe, 0x9, 0x2, 0x2, 0x6, 0x3f, 0x5, 0x7fffffff, 0x30, 0x31a78664, 0x9, 0x6, 0xfffffffb, 0x7fff, 0x2, 0x8, 0x8, 0x10001, 0x2, 0xffff, 0x15bb, 0x6, 0x1, 0x6, 0x0, 0xf261, 0x8, 0x3f0, 0x2, 0x1dc, 0x4, 0xbde7, 0x4, 0x8, 0x80000001, 0x9, 0x2400000, 0xbfff, 0x7ff, 0x2, 0x0, 0x74a, 0x3, 0x3, 0x4, 0x80000000, 0x3, 0x5, 0xffffffe0, 0x1f, 0x6, 0x80000000, 0x3, 0x400, 0x0, 0x459, 0x6, 0x99, 0x1, 0x0, 0x5, 0x5, 0x6, 0x7, 0x4, 0x3844a983, 0x5, 0x244b, 0x2, 0x1, 0x7ff, 0x9, 0x2, 0xc, 0x1ff, 0x0, 0x3, 0x6, 0x3, 0x7, 0xca, 0xfffffff7, 0x6549, 0x8, 0x0, 0x101, 0x0, 0xe4, 0x67, 0x401, 0x78, 0x6, 0x8000, 0xfffffff7, 0x2b, 0x3, 0x1, 0xfff, 0x2, 0xafb, 0x7fffffff, 0xfffffffd, 0x5, 0x4, 0x2, 0x7, 0x1535, 0x0, 0x1, 0x7, 0x2, 0x10000, 0x681f, 0x8, 0x5, 0x6, 0x1ff, 0x0, 0x3f, 0x0, 0x7fff, 0x1d8800, 0x20, 0x6, 0x0, 0x898b, 0x9, 0x9, 0x2, 0x6, 0x2f82af77, 0x100, 0xcc, 0x1, 0xac, 0x1c0000, 0x1, 0x2, 0x7, 0x0, 0x6, 0x10001, 0x7f, 0x2, 0x7ff, 0x92, 0x1, 0x401, 0x69adc624, 0x3, 0x52, 0x5, 0x400, 0x1ff, 0x4, 0x6, 0xb07, 0x2, 0x2, 0x100, 0x8, 0xfff, 0x1000, 0xff, 0x80000000, 0x56, 0x4, 0xfffffff9, 0xfff, 0x20000000, 0x77f1, 0x2, 0xffffff8e, 0x0, 0x9, 0x3a7e, 0xa8, 0x40, 0x3ad, 0xbd0, 0x101, 0x5, 0x7, 0x8, 0x101, 0x3, 0x3, 0x8000, 0x6, 0xb9c, 0x8, 0x1, 0x2, 0x1, 0x1, 0xa97, 0x1, 0x4, 0x3, 0x88, 0x5, 0x48, 0x7fffffff, 0x6, 0x3f, 0x9, 0x900000, 0x1000, 0x80000000]}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004063df6b6ea00000002000000000300000805000100070000000958a41d5cace885720000003cf498e4766dcc3e65373594a7f1e8b9633c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:11 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 15:44:11 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0xfffffffe, 0x5, 0x4, 0x400000, 0x2bf, {}, {0x2, 0x1, 0x18, 0x0, 0xf9, 0x40, "3ea82614"}, 0x6, 0x2, @offset=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket(0x2c, 0x1, 0x1) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x10000, 0x1, {}, {0x2, 0x8, 0x9, 0x7f, 0x81, 0x9, "f51b58f5"}, 0x40, 0x2, @offset=0x1, 0x7, 0x0, r3}) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000180)={0x0, 0x4}) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 610.405589][T28935] x_tables: duplicate underflow at hook 2 15:44:11 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 15:44:11 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = io_uring_setup(0x62, &(0x7f0000000040)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r3, 0x1) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x200, 0x5, &(0x7f0000000040)=[0x1ff, 0x101, 0x3, 0x7f, 0xeb52], &(0x7f0000000080)=[0x7fff, 0x9, 0x7], &(0x7f00000000c0)=[0xee88, 0x8, 0xb7a, 0x96, 0x0, 0xff7f]}) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r4, r5}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r6, r7}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r9}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) keyctl$dh_compute(0x17, &(0x7f0000000080), &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r10, 0x0, r10}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) keyctl$dh_compute(0x17, &(0x7f0000000080), &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r12 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) ftruncate(r13, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) ftruncate(r14, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRES32=r6, @ANYRES16=r8, @ANYRESOCT=r9, @ANYPTR64, @ANYRESHEX=r13, @ANYRESHEX=r2], @ANYRES32, @ANYRES32=r12, @ANYPTR64, @ANYRES32=r10, @ANYRESDEC=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=0x0], @ANYRES16=r14, @ANYRES32, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64=r11]], @ANYRES64=0x0], 0x22) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r15, 0x1) write$FUSE_NOTIFY_DELETE(r15, &(0x7f0000000540)=ANY=[@ANYBLOB="73000000060000000000000000000000064000000000000004000100000001000000000000661f99a836c665961be04ff96d75b6f8699087da3749a719810abbd0d4a8be3cb3962444b96d4f522f984ebbb6b001cf2974ea35fde6baf090000000003e1f4c72aa9226017b35022cccc84800"/127], 0x73) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 15:44:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x282240, 0x80) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x404400, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)={0x8}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000240)=0x4) epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000280)=0x3cd5) socket$inet6(0xa, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x28043, 0x0) 15:44:12 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000440)={0x2, 0x8501, 0x4, 0xfd5, 0x5, 0x7f}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x214, 0x10, 0x8, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in=@empty, {0x2, 0x80000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_crypt={0xdb, 0x2, {{'xchacha12-generic\x00'}, 0x498, "8b904685e4743fc3e444e3e0249765356c05cb2bf223da8d1342974a0e2f2afa1bdf2c4f97ccd01f3d46f8c893417d0e9a5d462f6a524ae7399cf73c950faa66fd2dfdb485498039fb79364666a067dbf0b982bfb6968445bbe37e2392e77ea47dda98f54dfd4f0125c3f3ded740f9049813307edb36b0bae220f0f525a02f762734be1dd55493894e8b66004ed79e4a64e5b5"}}]}, 0x214}}, 0x11) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x73a3cacd, 0xb, 0x4, 0x0, 0x3effd975, {0x0, 0x7530}, {0x5, 0x0, 0x7b, 0x8, 0x2, 0x0, "f00685f2"}, 0x7a84, 0x1, @fd, 0x9, 0x0, r1}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="900000000209050005000000000000000c00000b0800064000000001080003400000040208000640000000016400020006000340000400002c00018014000300fe8000000000000000000000000000aa14000400fd88000000000000000000000000000106000340000300001400018008000100e000000208000200ac1e00010600034000040000060003400003000080d6b5aa4ab9a76acc732553d9330bb3160613a088a89abaf02a72806aaf8081cdaee2678cc69d63a96ed6ba8c52963b435a1ba4972e9e293058a6e513a94374facd37ca94fef1c80bc248b5170b01279ed5c70a550a510028bc604a519ee66770244ef0e7d7398badcad75f091de7831c52d6007b12006488999791863e39ae93e7aa1f19ea97ec7b405e341c3fa8fb3fb44df295e04aa2b6457e9c2b92481e382a480ae6e0845e5270b8cc5d27b4f2119fd7aaecc10db25a"], 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010) 15:44:12 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="30e0e42921af6bbdbf179f471b69ab13025a1b82d90cdb7b5a1aa52de9f0f9c14c62acc5d18a23bdd1cdfaaa1a056d324733d217e301702ed06b1c16d735fcd34ffa0a60965076e12f07a139c5208f4aa75104902b511f0a48047e9f40978c3afabd9689e62e32d857d63ff807ef5b9607bfe65b75e2f257534ecbe340f167190032a288d26eae41f510b1b0a08b34709f4c53b2e3b8cfe2fe5883d91d45e1f272036859439fc8351ea18b9a0292b61784168cf58f0e25c16543105a9150273d8085b13767d7640fcf24f955cf367772", 0xd0, 0xfffffffffffffffc) keyctl$update(0x2, r3, &(0x7f0000000400)="9d431fa16f6fc5726d3ab2adcf4d7b0b580dca8ee38683f8bcd63424339c36b8c9a74f63ce2f3d6747ac765f37906352078b5427a204c06182ec1681b4c18b6e0f9808531848d5b24223e61bbd17ee72c58a25bd4671ae328893148b1ddb9f7861d9ea932a47635248ac96ee4437cea5941f1d88129a6afd80de956d253b5dc7e4ac73dfa841655907233bfdc937c711418c77f2f62af6770db508c76efb966a5c5057ea6a921c707fae3ecd4d82ea4577d28954022924484a2b2bfee07d7e638e48c700c012edad51f7a88f7e577849c004636674ceb9f2cd5e9e30e220023aec5498a139c84a7e2c", 0xe9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4a0) 15:44:12 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 15:44:12 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 15:44:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x105c40) bind$l2tp(r1, &(0x7f0000000140)={0x2, 0x0, @multicast2, 0x4}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000001c0)) r3 = socket$inet(0x2, 0x2, 0x0) listen(r0, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r10}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000280)={r10, 0x0, 0x2, [0x200, 0x7f]}, &(0x7f00000002c0)=0xc) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x4a000, 0x0) ioctl$CAPI_INSTALLED(r6, 0x80024322) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x143000) r11 = semget$private(0x0, 0x7, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0xffffffff, 0x2, 0xfffffffe, 0x3, 0x80000001}, 0x14) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x3cd26) semtimedop(r11, &(0x7f0000000640)=[{0x3, 0x3}, {0x3, 0x9}], 0x1a5, &(0x7f0000efe000)={0x2000}) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000080)=""/75) 15:44:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x409, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) exit_group(0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{r4, r5/1000+30000}, {r6, r7/1000+10000}}) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x4000010, r8, 0x1) 15:44:12 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='comm\x00') r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='comm\x00') r4 = getpid() syz_open_procfs(r4, &(0x7f0000000080)='comm\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000000c0)={0x200, 0x297, 0x24e6a09d, {0x40, 0xd5}, 0xff, 0x1}) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000080)='comm\x00') r6 = getpid() syz_open_procfs(r6, &(0x7f0000000080)='comm\x00') r7 = getpid() syz_open_procfs(r7, &(0x7f0000000080)='comm\x00') r8 = getpid() syz_open_procfs(r8, &(0x7f0000000080)='comm\x00') r9 = getpid() syz_open_procfs(r9, &(0x7f0000000080)='comm\x00') r10 = getpgid(r9) sched_getparam(r10, &(0x7f0000000040)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r12, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40001}, 0x40880) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) write$rfkill(r4, &(0x7f0000000140)={0x4, 0x3, 0x2, 0x0, 0x1}, 0x8) 15:44:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 15:44:13 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x4000, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x92000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48b0346273bd0f03, @perf_config_ext={0x0, 0x1}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 612.184591][T29209] x_tables: duplicate underflow at hook 2 [ 612.202316][T29210] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:44:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 612.385043][T29285] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 15:44:13 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)={'security\x00'}, 0x28) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000140)={0x6, 'macvlan1\x00', {0x3}, 0x8000}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@rc={0x1f, @none, 0x40}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 15:44:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:13 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000000)=0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001440)='/dev/bsg\x00', 0xc8000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_data=0x0}) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c840}, 0x8000) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x48840) r5 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5263f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x2) syz_open_procfs(0x0, &(0x7f0000272000)) [ 612.935550][T29333] x_tables: duplicate underflow at hook 2 15:44:14 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x7, @dev={0xac, 0x14, 0x14, 0x25}}, @time_exceeded={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2}}, "00006371ae9b1c01"}}}}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400100, 0x0) recvfrom$inet(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x40002000, 0x0, 0x0) 15:44:14 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 15:44:14 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @rand_addr, 0x1000000}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008d0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r6, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}}, 0x4080) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e5d696ac", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf25090000000a000600aaaaaaaaaabb0000"], 0x20}}, 0x80) 15:44:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x400, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x101, 0x10840) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r4, 0x1000}, &(0x7f0000000380)=0x8) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="5846342915d1f2dbd1da26b3fd3cf222c0d423320612f29c8a475c1a4a15d99b391332e30e80892e3ffdf0d960547525a52314553791287d1cde71b2d099f0c3ed53b5f0a6a54bd6d5b1d6e655b363a4c701bdf91425a4d355af9c8ea158940723fc1f49f0484841a93ea7156edfa5"], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r7, &(0x7f0000000940), 0x0, 0x3) 15:44:14 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r7, 0xfff, 0x6, 0x1, 0x9, 0x3ff}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)={r8, 0x93, "768cdd7f14507af86848fda08b25f070051e6274c74189583cd5f6241629420ae76aa40059dbc28bf5debed43f6a2ad64f7fa1ff71c46a64e8738fcf4708c4e19bea4a50206b3822468ba6a1988dba0596ff664b01f34b009350ffae5b838f41bd55c245fd7884b06b3ef962c29af3d640eea1f1528fc48d63ce99e29367edcf4f083ae1c15d7a49a3e92ec7c52719c2562e88"}, &(0x7f00000001c0)=0x9b) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @rand_addr="0d5a86de3d9dcf8326cd109427997a15", 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="3de476fa9a22b812e29de26f0a63937835f07167203805d0aab0accd17ede626d674695a7e90a75206cdd2e98eb6b9ead2c091", 0x33}, {&(0x7f0000000280)="ed7bc0839f30ec49e1090d0e37179c6904781dde9e39b97b33ad808dd2e4cb153d4d8030e55301a05cb0bcc1c03d0405e7ccf8784093df482c3a767f9e95b69c81e723681a4257a4b93e7afbcb0ff1354f5726ecbfd08eea1f896f8cb92f1188c5cf7fd8c0c8af89b0a627da6db4da6eff0e087336cb8121a75b58c5ccc7938aceac8483043812d8f0f1e4a044e300995867b3529fbfa616b890dadc3fb37421c62cdcd4c8e7ec306f5a9626acb38fbd653a47565e030dc15e1026c223b5cce7e69f8e60dbe98b7d2bac6fff9b66b808e9cc53de10d810ef4fe97076811f6b12c645db534abf37", 0xe7}, {&(0x7f00000003c0)="7128f04f4d877b0cdb87b50da73c0b800756449098328b4d9127dd3916edf741e1aa128ca0939763877a5f2a3672976fbd4f11c08de60a10218d824fd5f4a68f022b9eb6a39ec2274fd417dd9a9aca6f4d412a74f699dda5f9c59f0ef65b759ceb22b36ce2f5795f58d71d181d08ea86d2f088a98f0686ca508f34bd70190f0ffa74ab1ca3d8ca4f27bcadb7ecc6b2f3b10f4512b4344ac299fe52f59fc08cd131a8446dc7054e39106cf6930759e0b4d27f8a8e332004908af9de46613ea4729670dba6ff7615112d7025c79648b4fe9c537c6ff88d35eaeab3955865", 0xdd}, {&(0x7f00000004c0)="e767b0c5a71e76aa2cf12f75cc1fe5197bbe07d54779656315f7c83f9fd51768acc6a40931d8764e95d4cbd278f30c66166ad5256318b107705118c08e23e180f9eb86f7101c3fe6d370657a099913c552", 0x51}], 0x4, &(0x7f0000000580)=[@hopopts={{0xb8, 0x29, 0x36, {0x2f, 0x13, [], [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x8000, [0x7, 0x5, 0x8, 0x400, 0x0]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x2, 0x3, [0x7fff, 0x10000, 0x7ff, 0x9, 0x7ff, 0x6, 0x8001, 0x2, 0x200]}}, @jumbo={0xc2, 0x4, 0xffffffff}]}}}], 0xb8}}], 0x1, 0x8804) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000000}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:14 executing program 3 (fault-call:6 fault-nth:0): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:14 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) rt_sigpending(&(0x7f0000000000), 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x2) [ 613.526995][T29462] FAULT_INJECTION: forcing a failure. [ 613.526995][T29462] name failslab, interval 1, probability 0, space 0, times 0 [ 613.540233][T29462] CPU: 0 PID: 29462 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 613.548959][T29462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.559043][T29462] Call Trace: [ 613.562395][T29462] dump_stack+0x1c9/0x220 [ 613.566793][T29462] should_fail+0xa4e/0xa60 [ 613.571267][T29462] __should_failslab+0x255/0x270 [ 613.576266][T29462] should_failslab+0x29/0x70 [ 613.580905][T29462] kmem_cache_alloc_node+0xfd/0xed0 [ 613.586158][T29462] ? __alloc_skb+0x208/0xac0 [ 613.590835][T29462] __alloc_skb+0x208/0xac0 [ 613.595332][T29462] netlink_sendmsg+0x7d3/0x14d0 [ 613.600249][T29462] ? netlink_getsockopt+0x1440/0x1440 [ 613.605678][T29462] ____sys_sendmsg+0x12b6/0x1350 [ 613.610680][T29462] __sys_sendmmsg+0x5b6/0xc90 [ 613.615435][T29462] ? kmsan_get_metadata+0x11d/0x180 [ 613.620677][T29462] ? kmsan_get_metadata+0x11d/0x180 [ 613.625922][T29462] ? kmsan_set_origin_checked+0x95/0xf0 [ 613.631513][T29462] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 613.637629][T29462] ? kmsan_get_metadata+0x11d/0x180 [ 613.642868][T29462] ? kmsan_get_metadata+0x11d/0x180 [ 613.648106][T29462] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 613.653956][T29462] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 613.660108][T29462] ? prepare_exit_to_usermode+0x1ca/0x520 [ 613.665888][T29462] __se_sys_sendmmsg+0xbd/0xe0 [ 613.670701][T29462] __x64_sys_sendmmsg+0x56/0x70 [ 613.675611][T29462] do_syscall_64+0xb8/0x160 [ 613.680172][T29462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 613.686107][T29462] RIP: 0033:0x45b399 [ 613.690061][T29462] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.709708][T29462] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 613.718168][T29462] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 613.726174][T29462] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 613.734186][T29462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 613.742197][T29462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 613.750195][T29462] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000000 15:44:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000000201000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:14 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5, @ipv4={[], [], @rand_addr=0x3}}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:15 executing program 3 (fault-call:6 fault-nth:1): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:15 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r5, 0x5}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r6 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:15 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x7a0741, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x4, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x990a65, 0x9, [], @p_u32=&(0x7f00000000c0)=0xc100000}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000480)={0x1000000, 0x0, 0x29, 0x1f4afe3a61559a90, 0x4f, {0x0, 0x2710}, {0x2, 0x8, 0x1f, 0x2, 0x5, 0x0, "0a60e439"}, 0x7, 0x1, @offset=0x11b, 0xff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) 15:44:15 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x800, @empty, 0x80000}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:15 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x8bf) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000140)={0xbcd, 0x0, 0x5, 0x2}) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x3c, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdc}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x2, [{0x2, 0x0, "8e30b90269b52e9f51399cec833f"}, {0x5, 0x0, "af0f95729ba7c9ce46c3fe30"}, {0x7, 0x0, "cb3180"}, {0x7, 0x0, "dbf4f028acfb286d25bf0d75bb"}, {0x2, 0x0, "f4e2"}, {0x7, 0x0, "1c050d9d11af6d7452d0"}, {0x7, 0x0, "e6b390c0f549da3e4e674c"}]}, @timestamp_addr={0x44, 0x0, 0xec, 0x1, 0x6, [{@empty, 0x1}, {@empty, 0xff}, {@loopback, 0x3}, {@multicast1, 0x100}, {@remote}, {@loopback, 0x3729}]}, @timestamp_prespec={0x44, 0x0, 0x14, 0x3, 0x1, [{@loopback, 0x3ff}, {@empty, 0x800}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8000}, {@multicast2, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x919}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xfffffffb}, {@rand_addr=0xfffffffe, 0x9}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x7, 0xffffffd0}]}, @generic={0x83, 0x0, "4d4044e7c2b765a57c152137afc142"}, @rr={0x7, 0x0, 0xc7, [@multicast2, @loopback]}, @rr={0x7, 0x0, 0xc}, @timestamp_prespec={0x44, 0x0, 0x2c, 0x3, 0x5, [{@empty, 0xccb2}, {@multicast1, 0x6}, {@remote, 0x5}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@rand_addr=0xfffffffa, 0xb2ed}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x3}, {@broadcast, 0xffffffff}, {@multicast2, 0x7}]}]}}}], 0x68}, 0x20000010) [ 614.703039][T29608] FAULT_INJECTION: forcing a failure. [ 614.703039][T29608] name failslab, interval 1, probability 0, space 0, times 0 [ 614.716052][T29608] CPU: 0 PID: 29608 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 614.724788][T29608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.734903][T29608] Call Trace: [ 614.738286][T29608] dump_stack+0x1c9/0x220 [ 614.742733][T29608] should_fail+0xa4e/0xa60 [ 614.747254][T29608] __should_failslab+0x255/0x270 [ 614.752295][T29608] should_failslab+0x29/0x70 [ 614.756991][T29608] __kmalloc_node_track_caller+0x1c3/0x1200 [ 614.763034][T29608] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 614.768573][T29608] ? netlink_sendmsg+0x7d3/0x14d0 [ 614.773677][T29608] ? netlink_sendmsg+0x7d3/0x14d0 [ 614.778755][T29608] __alloc_skb+0x2fd/0xac0 [ 614.783230][T29608] ? netlink_sendmsg+0x7d3/0x14d0 [ 614.788305][T29608] netlink_sendmsg+0x7d3/0x14d0 [ 614.793217][T29608] ? netlink_getsockopt+0x1440/0x1440 [ 614.798629][T29608] ____sys_sendmsg+0x12b6/0x1350 [ 614.803631][T29608] __sys_sendmmsg+0x5b6/0xc90 [ 614.808377][T29608] ? kmsan_get_metadata+0x11d/0x180 [ 614.813616][T29608] ? kmsan_get_metadata+0x11d/0x180 [ 614.818854][T29608] ? kmsan_set_origin_checked+0x95/0xf0 [ 614.824465][T29608] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 614.830587][T29608] ? kmsan_get_metadata+0x11d/0x180 [ 614.835835][T29608] ? kmsan_get_metadata+0x11d/0x180 [ 614.841079][T29608] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 614.846934][T29608] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 614.853050][T29608] ? prepare_exit_to_usermode+0x1ca/0x520 [ 614.858817][T29608] __se_sys_sendmmsg+0xbd/0xe0 [ 614.863636][T29608] __x64_sys_sendmmsg+0x56/0x70 [ 614.868531][T29608] do_syscall_64+0xb8/0x160 [ 614.873092][T29608] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 614.879021][T29608] RIP: 0033:0x45b399 [ 614.882979][T29608] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:44:15 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0xc200, 0x0) accept4$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x80800) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_delrule={0x38, 0x21, 0x200, 0x70bd26, 0x25dfdbff, {0xa, 0x10, 0x10, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e22}}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'batadv0\x00'}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) ftruncate(r11, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r11, 0x40045542, &(0x7f0000000140)=0x100) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=0x4) close(r10) ftruncate(r10, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) connect(0xffffffffffffffff, &(0x7f00007a8000)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0xffffffffffffff91}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0xd7f, 0x0, 0x3, 0x8, 0x40, 0xff}, 0x20) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) keyctl$set_reqkey_keyring(0xe, 0x4) [ 614.902704][T29608] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 614.911154][T29608] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 614.919155][T29608] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 614.927163][T29608] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 614.935160][T29608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 614.943165][T29608] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000001 15:44:16 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) [ 615.160718][T29619] x_tables: duplicate underflow at hook 2 15:44:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0xa10000, 0x3ff, 0x0, r0, 0x0, &(0x7f00000000c0)={0xbefecf7e8b180682, 0xfff, [], @string=&(0x7f0000000040)=0x7f}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000140)={0x0, 0x480, 0x200d, 0x1}) 15:44:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty, 0x4000000}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffffffffffcfc, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4004084) clone(0x20000000012c4900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 615.614209][T29738] x_tables: duplicate underflow at hook 2 15:44:16 executing program 3 (fault-call:6 fault-nth:2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:16 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x190, 0x0, 0x190, 0x0, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1\x00', {0x24, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 15:44:16 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @rand_addr="0000ee45cc53db0000001400"}, 0x1c) listen(r0, 0x4) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xfffffffc}}, 0x24) r1 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) shmdt(r1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x257}, {0xa, 0x4e22, 0x3f, @mcast1, 0xffffffff}, 0x2, [0xffffffff, 0xfffffff7, 0x83b5, 0x400, 0x80000001, 0xc33, 0x2, 0xad2d]}, 0x5c) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000080)='comm\x00') r2 = syz_open_procfs(r1, &(0x7f0000000040)='mountstats\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'veth1\x00', 0x3}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1000000400200) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL]}, 0xfffffffffffffd79}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) membarrier(0x2, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) [ 615.963468][T29849] xt_hashlimit: overflow, rate too high: 0 [ 615.989942][T29854] xt_hashlimit: overflow, rate too high: 0 [ 616.070502][T29860] x_tables: duplicate underflow at hook 2 [ 616.079771][T29861] FAULT_INJECTION: forcing a failure. [ 616.079771][T29861] name failslab, interval 1, probability 0, space 0, times 0 [ 616.092683][T29861] CPU: 1 PID: 29861 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 616.101419][T29861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.111535][T29861] Call Trace: [ 616.114937][T29861] dump_stack+0x1c9/0x220 [ 616.119364][T29861] should_fail+0xa4e/0xa60 [ 616.123881][T29861] __should_failslab+0x255/0x270 [ 616.128920][T29861] should_failslab+0x29/0x70 [ 616.133597][T29861] kmem_cache_alloc+0xd0/0xd70 [ 616.138444][T29861] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 616.144338][T29861] ? skb_clone+0x328/0x5d0 [ 616.148839][T29861] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 616.154997][T29861] ? should_fail+0x177/0xa60 [ 616.159680][T29861] ? kmsan_get_metadata+0x11d/0x180 [ 616.164990][T29861] skb_clone+0x328/0x5d0 [ 616.169364][T29861] netlink_deliver_tap+0x788/0xeb0 [ 616.174538][T29861] ? __netlink_lookup+0x8b9/0x980 [ 616.179613][T29861] ? kmsan_set_origin_checked+0x95/0xf0 [ 616.185227][T29861] netlink_unicast+0xe87/0x1100 [ 616.190135][T29861] netlink_sendmsg+0x1248/0x14d0 [ 616.195131][T29861] ? netlink_getsockopt+0x1440/0x1440 [ 616.200544][T29861] ____sys_sendmsg+0x12b6/0x1350 [ 616.205540][T29861] __sys_sendmmsg+0x5b6/0xc90 [ 616.210290][T29861] ? kmsan_get_metadata+0x11d/0x180 [ 616.215527][T29861] ? kmsan_get_metadata+0x11d/0x180 [ 616.220767][T29861] ? kmsan_set_origin_checked+0x95/0xf0 [ 616.226380][T29861] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 616.232491][T29861] ? kmsan_get_metadata+0x11d/0x180 [ 616.237727][T29861] ? kmsan_get_metadata+0x11d/0x180 [ 616.242968][T29861] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 616.248819][T29861] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 616.254950][T29861] ? prepare_exit_to_usermode+0x1ca/0x520 [ 616.260713][T29861] __se_sys_sendmmsg+0xbd/0xe0 [ 616.265525][T29861] __x64_sys_sendmmsg+0x56/0x70 [ 616.270417][T29861] do_syscall_64+0xb8/0x160 [ 616.274977][T29861] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.280915][T29861] RIP: 0033:0x45b399 [ 616.284869][T29861] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.304636][T29861] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 616.313099][T29861] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 616.321194][T29861] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 616.329199][T29861] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 616.337206][T29861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 616.345235][T29861] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000002 15:44:17 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924924924924f0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r7, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r7, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x50, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4b}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040800}, 0x40004) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x30, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x91}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040010}, 0x10000041) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x2, 0x1, 0x4, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008801}, 0x8801) sendmsg$rds(r4, &(0x7f0000001a40)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000001740)=""/67, 0x43}], 0x9, &(0x7f0000001940)=[@mask_cswp={0x58, 0x114, 0x9, {{0x100, 0x800000}, &(0x7f00000006c0)=0x7fffffff, &(0x7f0000001880)=0x6, 0x6, 0xd780, 0x8, 0x5, 0x2, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x3c1}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x1000}, &(0x7f00000018c0), &(0x7f0000001900)=0x200, 0x7fffffff, 0x4, 0x9, 0x6, 0x20, 0x4}}], 0xc8, 0x92}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x2, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x100, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="140000201000010000000000000000000000000a14000000000a00000000000000000000000000002c000000050a01030000000000000000000000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) 15:44:17 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="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", 0xff, 0xfffffffffffffffe) r4 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000340)='security.evm\x00', &(0x7f00000003c0)=@v1={0x2, "a8866dbe575859fb36f985f7754c1970d679a0"}, 0x14, 0x3) keyctl$get_security(0x11, r3, &(0x7f0000000200)=""/158, 0x9e) ftruncate(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)) r5 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0xaa300, 0x0) write$P9_RREAD(r6, &(0x7f0000000300)={0x17, 0x75, 0x1, {0xc, "eb5faaa031cfbfea0f31c6f0"}}, 0x17) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044400}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="96f10e38cb710f2d7c064f7c9c29e3ee75e6fb99e6553c948731b067b1604232690635f728d0286dafdce15dad24784960a846d875139b68bd8e05f80b66b6d90c7b2bd91631ffe1db515a63d8f518a86a28699c45b15c1f02f63f7bc1615a4f76271a9f68db35e0ace05a296f63b37bdf8abc4f51350ee4d1c02481a3a786ed8949b7c165798865fc6f8e0f500a22b83e41b6eb9c9bafebab3c6c90deac4714e2360e3c0f88a5bb095a435a79f8888a7a00c346afd9840ae089aefe1a0b22c0261c920ecdcdc7", 0xc7}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000300)="2f2773293c7f4fad31ae2d8a0502c5970a0934761903ddf9d6d2978eb67f93c630e353b7dc4ec9a13e4314dd9689e148f9faf68381554c64b7e0038f52a3b0e3e1fed0024940a6818f39fec8d731155a8d6c32b4b7ee09b1f586f2a14989dad301ea2a09bda9efcc071aeff6275fb9448aaaaf3b6e793d4896027cac52ce3155e4e26dc59524937e2eb0a2be2a17a21ffab6e0c61ce9ba65143d9a3a10e333bfb8c460dc7592", 0xa6}, {&(0x7f00000003c0)="b98a4047ca193d5e9c77e0f4384959c5a5ba071f986c5424c74d996468d8a53de748eb370d6ea21e7fc7d42ef7c29366ebdb9c2c6717e40f6643de8c28c66696e6479cae48f64c3b61501f0ade078cc046b10477330d40a5299c62540371bd779a8156b770aea92d182da4b3848508751231fbc880f7040f00d37bb34e2ea42a1625c424f048b0814b5478e9a34406ea113fc47d32057f54c60674", 0x9b}], 0x4, 0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 616.851231][T29984] x_tables: duplicate underflow at hook 2 15:44:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00', @ifru_settings={0x0, 0x10009, @fr_pvc=0x0}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 15:44:18 executing program 3 (fault-call:6 fault-nth:3): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:18 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x3) fdatasync(r3) 15:44:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) sendto$inet6(r2, &(0x7f0000000040)="566337b1d9ac6c808b40f26fadeb90eddf0e7e0de2a1f9bf6cc4a333c4573b2f39021834967c08556c3bce1c2f861dd039c161901fc3664dab2a67a899773a92cb0e24b52bb0b73623f7498e5f876319449bbdb35a609c0acf20271a4c8bce061742eba6995a59589782f58dfce897f2e085e1b87b9ea8fb2256bf814a8d31121cbdf126b4d51d1d71d40e05564b7488dfc0bb5d937ea42d531de8c9fdc79addc63a78b48be9f48b0be28b3d76e7437ceb89db9b214aab0835831c32bff18dc2bdda42e832384dd624b4ee06dd6c4d53f1d8cc483f517d3ef9313bfbabe0a370da48c724bce0d5613415dd635ad20817b7d06be6da428869", 0xf8, 0x8000, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @empty, 0x1}, 0x1c) listen(r1, 0x4) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 617.369049][T30102] FAULT_INJECTION: forcing a failure. [ 617.369049][T30102] name failslab, interval 1, probability 0, space 0, times 0 [ 617.383898][T30102] CPU: 1 PID: 30102 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 617.392644][T30102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.402753][T30102] Call Trace: [ 617.406160][T30102] dump_stack+0x1c9/0x220 [ 617.410585][T30102] should_fail+0xa4e/0xa60 [ 617.415096][T30102] __should_failslab+0x255/0x270 [ 617.420142][T30102] should_failslab+0x29/0x70 [ 617.424826][T30102] kmem_cache_alloc_node+0xfd/0xed0 [ 617.430106][T30102] ? kmsan_get_metadata+0x4f/0x180 [ 617.435301][T30102] ? __alloc_skb+0x208/0xac0 [ 617.439967][T30102] ? kmsan_set_origin_checked+0x95/0xf0 [ 617.445608][T30102] ? kmsan_get_metadata+0x4f/0x180 [ 617.450806][T30102] ? kmsan_get_metadata+0x11d/0x180 [ 617.456099][T30102] __alloc_skb+0x208/0xac0 [ 617.460626][T30102] netlink_sendmsg+0x7d3/0x14d0 [ 617.465575][T30102] ? netlink_getsockopt+0x1440/0x1440 [ 617.471019][T30102] ____sys_sendmsg+0x12b6/0x1350 [ 617.476059][T30102] __sys_sendmmsg+0x5b6/0xc90 [ 617.480825][T30102] ? kmsan_get_metadata+0x11d/0x180 [ 617.486093][T30102] ? kmsan_get_metadata+0x11d/0x180 [ 617.491426][T30102] ? kmsan_set_origin_checked+0x95/0xf0 [ 617.497037][T30102] ? kmsan_get_metadata+0x11d/0x180 [ 617.502308][T30102] ? kmsan_get_metadata+0x11d/0x180 [ 617.507577][T30102] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 617.513443][T30102] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 617.519570][T30102] ? prepare_exit_to_usermode+0x1ca/0x520 [ 617.525354][T30102] __se_sys_sendmmsg+0xbd/0xe0 [ 617.530188][T30102] __x64_sys_sendmmsg+0x56/0x70 [ 617.535094][T30102] do_syscall_64+0xb8/0x160 [ 617.539662][T30102] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.545602][T30102] RIP: 0033:0x45b399 [ 617.549565][T30102] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 617.569316][T30102] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 617.577792][T30102] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 617.585814][T30102] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 617.593840][T30102] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 617.601865][T30102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 617.609894][T30102] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000003 15:44:18 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000200)={0xca8, 0x8, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) [ 617.818976][T30115] x_tables: duplicate underflow at hook 2 15:44:19 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) socket$inet6(0xa, 0x6, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x250500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)='vmnet1ppp0ppp0\x00', 0xf, 0x3) close(r1) ftruncate(r1, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e27, 0x1000003, @empty, 0x3}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:19 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x1, 0x3f, 0x2, 0x8}, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='cpuset@system/,&selinux\x00', &(0x7f0000000140)='/dev/binder#\x00', 0x0) ftruncate(r3, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x2, 0x1f, 0x3, 0xf8, 0x5, 0x8}) r4 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:19 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x20000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000100)={@none, 0x1}) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x8000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r8, 0x7, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000340)={r9, 0x401}, &(0x7f0000000380)=0x8) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r11, 0x80044501, &(0x7f0000000200)=""/150) 15:44:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x10}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xae, 0x100, 0x840000004, 0xd5b, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x4000, 0x127301}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xffffffff, @empty, 0x9}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x9a4b, @mcast1, 0x9b82}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e22, 0x8, @loopback, 0x6}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x6, @loopback, 0x3ff}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x8}], 0xbc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x8000000}, 0xc) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) ftruncate(r10, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x5c}}, 0x40083) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:44:19 executing program 3 (fault-call:6 fault-nth:4): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 618.517444][T30233] x_tables: duplicate underflow at hook 2 [ 618.561105][T30241] FAULT_INJECTION: forcing a failure. [ 618.561105][T30241] name failslab, interval 1, probability 0, space 0, times 0 [ 618.574239][T30241] CPU: 0 PID: 30241 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 618.582976][T30241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.593087][T30241] Call Trace: [ 618.596621][T30241] dump_stack+0x1c9/0x220 [ 618.601121][T30241] should_fail+0xa4e/0xa60 [ 618.605655][T30241] __should_failslab+0x255/0x270 [ 618.610673][T30241] should_failslab+0x29/0x70 [ 618.615332][T30241] __kmalloc_node_track_caller+0x1c3/0x1200 [ 618.621279][T30241] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 618.626793][T30241] ? kmsan_get_metadata+0x4f/0x180 [ 618.632019][T30241] ? netlink_sendmsg+0x7d3/0x14d0 [ 618.637116][T30241] ? netlink_sendmsg+0x7d3/0x14d0 [ 618.642208][T30241] __alloc_skb+0x2fd/0xac0 [ 618.646674][T30241] ? netlink_sendmsg+0x7d3/0x14d0 [ 618.651763][T30241] netlink_sendmsg+0x7d3/0x14d0 [ 618.656694][T30241] ? netlink_getsockopt+0x1440/0x1440 [ 618.662117][T30241] ____sys_sendmsg+0x12b6/0x1350 [ 618.667131][T30241] __sys_sendmmsg+0x5b6/0xc90 [ 618.671932][T30241] ? kmsan_get_metadata+0x11d/0x180 [ 618.677201][T30241] ? kmsan_get_metadata+0x11d/0x180 [ 618.682449][T30241] ? kmsan_set_origin_checked+0x95/0xf0 [ 618.688066][T30241] ? kmsan_get_metadata+0x11d/0x180 [ 618.693322][T30241] ? kmsan_get_metadata+0x11d/0x180 [ 618.698582][T30241] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 618.704453][T30241] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 618.710640][T30241] ? prepare_exit_to_usermode+0x1ca/0x520 [ 618.716417][T30241] __se_sys_sendmmsg+0xbd/0xe0 [ 618.721238][T30241] __x64_sys_sendmmsg+0x56/0x70 [ 618.726145][T30241] do_syscall_64+0xb8/0x160 [ 618.730719][T30241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 618.736637][T30241] RIP: 0033:0x45b399 [ 618.740589][T30241] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.760237][T30241] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 618.768708][T30241] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 618.776738][T30241] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 618.784753][T30241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 618.792772][T30241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 618.800786][T30241] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000004 15:44:19 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x6d852670f04c6cc1, &(0x7f0000000240)=ANY=[@ANYBLOB="001a000000000000000100c9108279ba8fb936ea802552d1ea9a155b94fb8f14318f33837aca79a47eaccfc1e1cc043cc647c122673549da482dbfab920ee5f605e24ce58c7a47b09576f83397f089324506481e2c6262ca2fb49cc3714f20736d0551ea7882ae5348d2142c1bf2d1eab9bed2a83dc5242f545d800def76d890af60eaff39996b44eebd877cd074075f65bc607046e4b35d09aad599b0472a0e90abc164a563a139f4583744fe2f01020000010a9693f346b99e2f29c8dfc910fe8000000000000000000000000000aac2040000800001030000000000000000e731c28a3fa9e6b40c054e5a058f253d2be19d45a10e196dc00f0358696478753d74644abd2ecc341ef4a2cceccc6a4feec8b92f5325aaab1104afe4e6b90311ad2d930990aa166aa854c0d0aa367fdfa357df70d2729950281985410b0f220b93440fbaa3b854027e06c19ca6d66b0c44fd14586b9c9c3ace83572936c368bc5770e27f31f318fcc9fae0fb953c51e622f97a899e5e0bec717af5a2d1a6bf"], 0xe0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x3) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400140, 0x0) write$P9_RCLUNK(r4, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) 15:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r7, 0x7f}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x811}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40054}, 0x4000) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 15:44:20 executing program 0: r0 = socket(0x10, 0x800000000080002, 0x10) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x20) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001300fbffe0ffffff000000002f000000"], 0x14}, 0x1, 0x68}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249266b, 0x0) 15:44:20 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="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"/270], 0x114}, 0x1, 0x0, 0x0, 0x8054}, 0x4008000) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0xffffffffffffffe6) [ 619.216126][T30351] sctp: [Deprecated]: syz-executor.5 (pid 30351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.216126][T30351] Use struct sctp_sack_info instead 15:44:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='comm\x00') capget(&(0x7f0000000000)={0x20071026, r3}, &(0x7f0000000080)={0x6, 0x81, 0x6, 0x9, 0x2}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:20 executing program 3 (fault-call:6 fault-nth:5): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 619.427956][T30362] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 619.577553][T30356] sctp: [Deprecated]: syz-executor.5 (pid 30356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.577553][T30356] Use struct sctp_sack_info instead [ 619.589195][T30390] FAULT_INJECTION: forcing a failure. [ 619.589195][T30390] name failslab, interval 1, probability 0, space 0, times 0 [ 619.607746][T30390] CPU: 1 PID: 30390 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 619.616508][T30390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.626671][T30390] Call Trace: [ 619.630068][T30390] dump_stack+0x1c9/0x220 [ 619.634511][T30390] should_fail+0xa4e/0xa60 [ 619.639059][T30390] __should_failslab+0x255/0x270 [ 619.644111][T30390] should_failslab+0x29/0x70 [ 619.648803][T30390] kmem_cache_alloc+0xd0/0xd70 [ 619.653670][T30390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 619.659587][T30390] ? skb_clone+0x328/0x5d0 [ 619.664093][T30390] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 619.670256][T30390] ? should_fail+0x177/0xa60 15:44:20 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) connect(r3, &(0x7f00007a8000)=@nfc_llcp={0x27, 0x1, 0x2, 0x1, 0x2, 0x0, "47272c1183def25b68070be0b238cb70036cff918ce9541fd9dbb7527a5f316c971cc2edecf38cd0af28ea91bd1cd9f6787269f487b1da21f6f4872cf9b123", 0x3d}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 619.674928][T30390] ? kmsan_get_metadata+0x11d/0x180 [ 619.680227][T30390] skb_clone+0x328/0x5d0 [ 619.684581][T30390] netlink_deliver_tap+0x788/0xeb0 [ 619.689772][T30390] ? __netlink_lookup+0x8b9/0x980 [ 619.694884][T30390] ? kmsan_set_origin_checked+0x95/0xf0 [ 619.700542][T30390] netlink_unicast+0xe87/0x1100 [ 619.705595][T30390] netlink_sendmsg+0x1248/0x14d0 [ 619.710639][T30390] ? netlink_getsockopt+0x1440/0x1440 [ 619.716082][T30390] ____sys_sendmsg+0x12b6/0x1350 [ 619.721120][T30390] __sys_sendmmsg+0x5b6/0xc90 [ 619.725912][T30390] ? kmsan_get_metadata+0x11d/0x180 [ 619.731187][T30390] ? kmsan_get_metadata+0x11d/0x180 [ 619.736439][T30390] ? kmsan_set_origin_checked+0x95/0xf0 [ 619.742126][T30390] ? kmsan_get_metadata+0x11d/0x180 [ 619.747531][T30390] ? kmsan_get_metadata+0x11d/0x180 [ 619.752796][T30390] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 619.758665][T30390] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 619.764906][T30390] ? prepare_exit_to_usermode+0x1ca/0x520 [ 619.770700][T30390] __se_sys_sendmmsg+0xbd/0xe0 [ 619.775536][T30390] __x64_sys_sendmmsg+0x56/0x70 [ 619.780452][T30390] do_syscall_64+0xb8/0x160 [ 619.785133][T30390] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 619.791092][T30390] RIP: 0033:0x45b399 [ 619.795049][T30390] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 619.814704][T30390] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 619.823173][T30390] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 619.831195][T30390] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 619.839218][T30390] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 619.847245][T30390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 619.855267][T30390] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000005 15:44:20 executing program 0: 15:44:21 executing program 5: r0 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 15:44:21 executing program 3 (fault-call:6 fault-nth:6): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 620.563091][T30492] FAULT_INJECTION: forcing a failure. [ 620.563091][T30492] name failslab, interval 1, probability 0, space 0, times 0 [ 620.576388][T30492] CPU: 1 PID: 30492 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 620.585126][T30492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.595231][T30492] Call Trace: [ 620.598678][T30492] dump_stack+0x1c9/0x220 [ 620.603110][T30492] should_fail+0xa4e/0xa60 [ 620.607652][T30492] __should_failslab+0x255/0x270 [ 620.612714][T30492] should_failslab+0x29/0x70 [ 620.617395][T30492] kmem_cache_alloc_node+0xfd/0xed0 [ 620.622676][T30492] ? __alloc_skb+0x208/0xac0 [ 620.627338][T30492] ? kmsan_get_metadata+0x11d/0x180 [ 620.632730][T30492] ? kmsan_get_metadata+0x4f/0x180 [ 620.637923][T30492] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.643831][T30492] __alloc_skb+0x208/0xac0 [ 620.648360][T30492] netlink_dump+0x44b/0x1ab0 [ 620.653035][T30492] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 620.659181][T30492] ? kmsan_get_metadata+0x11d/0x180 [ 620.664461][T30492] ? kmsan_set_origin_checked+0x95/0xf0 [ 620.670155][T30492] __netlink_dump_start+0xbb2/0xcf0 [ 620.675531][T30492] rtnetlink_rcv_msg+0x14d9/0x1570 [ 620.680756][T30492] ? rtnl_getlink+0x1720/0x1720 [ 620.685707][T30492] ? __local_bh_enable_ip+0x97/0x1d0 [ 620.691103][T30492] ? rtnl_getlink+0x1720/0x1720 [ 620.696066][T30492] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.701954][T30492] netlink_rcv_skb+0x451/0x650 [ 620.706789][T30492] ? rtnetlink_bind+0x120/0x120 [ 620.711701][T30492] rtnetlink_rcv+0x50/0x60 [ 620.716287][T30492] netlink_unicast+0xf9e/0x1100 [ 620.721280][T30492] ? rtnetlink_net_exit+0x90/0x90 [ 620.726383][T30492] netlink_sendmsg+0x1248/0x14d0 [ 620.731397][T30492] ? netlink_getsockopt+0x1440/0x1440 [ 620.736828][T30492] ____sys_sendmsg+0x12b6/0x1350 [ 620.741862][T30492] __sys_sendmmsg+0x5b6/0xc90 [ 620.746706][T30492] ? kmsan_get_metadata+0x11d/0x180 [ 620.751984][T30492] ? kmsan_get_metadata+0x11d/0x180 [ 620.757243][T30492] ? kmsan_set_origin_checked+0x95/0xf0 [ 620.762860][T30492] ? kmsan_get_metadata+0x11d/0x180 [ 620.768122][T30492] ? kmsan_get_metadata+0x11d/0x180 [ 620.773379][T30492] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.779255][T30492] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 620.785379][T30492] ? prepare_exit_to_usermode+0x1ca/0x520 [ 620.791167][T30492] __se_sys_sendmmsg+0xbd/0xe0 [ 620.796027][T30492] __x64_sys_sendmmsg+0x56/0x70 [ 620.800961][T30492] do_syscall_64+0xb8/0x160 [ 620.805551][T30492] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 620.811491][T30492] RIP: 0033:0x45b399 [ 620.815455][T30492] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.835221][T30492] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 620.843677][T30492] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 620.851691][T30492] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 620.859708][T30492] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 620.867870][T30492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 620.875883][T30492] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000006 15:44:21 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) recvmsg(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/70, 0x46}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/248, 0xf8}], 0x9, &(0x7f0000000980)=""/265, 0x109}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000240)='@(\'GPL[#vmnet1systemvboxnet0Xem1em1{self\x00', 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r4) keyctl$link(0x8, r3, r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:22 executing program 3 (fault-call:6 fault-nth:7): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:22 executing program 0: openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x801, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) stat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x6}, {0x2, 0x1, r2}, {0x2, 0x3}], {}, [], {0x10, 0x4}, {0x20, 0x5}}, 0x3c, 0x1) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f00000003c0)={0xa0, 0x0, 0x8, {{0x3, 0x3, 0x4, 0x10001, 0x7, 0x7, {0x1, 0x4, 0x5d, 0x1f, 0x81, 0x2, 0xfffffff7, 0x8, 0x80, 0x1f, 0x0, r2, r3, 0x3, 0x6}}, {0x0, 0x17}}}, 0xa0) ftruncate(r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000000000000001f00000008009a00000000000400cc002c002280080001000000000008000500000000000800030000000000080006000000000008000200000000000500920000000000f5ff21800800060000000000080006000000000008000100000000000400cc00"], 0x74}}, 0x4080) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000226bd7000fedbdf25150000000800010001000000"], 0x1c}}, 0x4008000) r5 = getpid() capget(&(0x7f0000000000)={0x20080522, r5}, &(0x7f0000000040)={0x4, 0x20, 0xbe1, 0x7f, 0x4, 0x8}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) unshare(0x60020000) [ 621.090754][T30500] x_tables: duplicate underflow at hook 2 [ 621.099433][T30502] FAULT_INJECTION: forcing a failure. [ 621.099433][T30502] name failslab, interval 1, probability 0, space 0, times 0 [ 621.112356][T30502] CPU: 1 PID: 30502 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 621.121090][T30502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.131201][T30502] Call Trace: [ 621.134581][T30502] dump_stack+0x1c9/0x220 [ 621.139003][T30502] should_fail+0xa4e/0xa60 [ 621.143541][T30502] __should_failslab+0x255/0x270 [ 621.148581][T30502] should_failslab+0x29/0x70 [ 621.153264][T30502] __kmalloc_node_track_caller+0x1c3/0x1200 [ 621.159252][T30502] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 621.164820][T30502] ? netlink_dump+0x44b/0x1ab0 [ 621.169691][T30502] ? netlink_dump+0x44b/0x1ab0 [ 621.174562][T30502] __alloc_skb+0x2fd/0xac0 [ 621.179076][T30502] ? netlink_dump+0x44b/0x1ab0 [ 621.183959][T30502] netlink_dump+0x44b/0x1ab0 [ 621.188626][T30502] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 621.194776][T30502] ? kmsan_get_metadata+0x11d/0x180 [ 621.200074][T30502] ? kmsan_set_origin_checked+0x95/0xf0 [ 621.205743][T30502] __netlink_dump_start+0xbb2/0xcf0 [ 621.211073][T30502] rtnetlink_rcv_msg+0x14d9/0x1570 [ 621.216297][T30502] ? rtnl_getlink+0x1720/0x1720 [ 621.221231][T30502] ? __local_bh_enable_ip+0x97/0x1d0 [ 621.226576][T30502] ? rtnl_getlink+0x1720/0x1720 [ 621.231529][T30502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 621.237400][T30502] netlink_rcv_skb+0x451/0x650 [ 621.242222][T30502] ? rtnetlink_bind+0x120/0x120 [ 621.247133][T30502] rtnetlink_rcv+0x50/0x60 [ 621.251617][T30502] netlink_unicast+0xf9e/0x1100 [ 621.256532][T30502] ? rtnetlink_net_exit+0x90/0x90 [ 621.261619][T30502] netlink_sendmsg+0x1248/0x14d0 [ 621.266626][T30502] ? netlink_getsockopt+0x1440/0x1440 [ 621.272042][T30502] ____sys_sendmsg+0x12b6/0x1350 [ 621.277045][T30502] __sys_sendmmsg+0x5b6/0xc90 [ 621.281819][T30502] ? kmsan_get_metadata+0x11d/0x180 [ 621.287110][T30502] ? kmsan_get_metadata+0x11d/0x180 [ 621.292357][T30502] ? kmsan_set_origin_checked+0x95/0xf0 [ 621.297959][T30502] ? kmsan_get_metadata+0x11d/0x180 [ 621.303203][T30502] ? kmsan_get_metadata+0x11d/0x180 [ 621.308464][T30502] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 621.314315][T30502] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 621.320438][T30502] ? prepare_exit_to_usermode+0x1ca/0x520 [ 621.326208][T30502] __se_sys_sendmmsg+0xbd/0xe0 [ 621.331015][T30502] __x64_sys_sendmmsg+0x56/0x70 [ 621.335909][T30502] do_syscall_64+0xb8/0x160 [ 621.340470][T30502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 621.346388][T30502] RIP: 0033:0x45b399 [ 621.350331][T30502] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.369970][T30502] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 621.378423][T30502] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 621.386427][T30502] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 621.394428][T30502] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 621.402424][T30502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 621.410425][T30502] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000007 [ 621.598585][T30505] IPVS: ftp: loaded support on port[0] = 21 15:44:22 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x80000) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20001, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x10001, 0x10001, r4, 0x0, &(0x7f0000000100)={0x990a5f, 0x400, [], @p_u16=&(0x7f00000000c0)=0x3ff}}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) bind$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x3}, 0x10) 15:44:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x200a40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x2, "993716613b5be1ac69e2a434da3b2d8a759c3d46680435075db5dd0bd8b179f6", 0x6, 0x401, 0x80000000, 0x0, 0x830f, 0x3f, 0xc2, 0x1819, [0x6, 0x5, 0x9, 0x400]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x101000, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) sendto$inet(r3, &(0x7f0000000380)="bff15656b9ba7610f76e0843d77cd49bfd07da155dcbbf46d2abb9a38c430398ebc35a4db9c6667768ffc819309275b9e2fc90a2a95aa5c01645f5c27d43567821dc59ce5b2680139e29a86433aba59aceaaa1fa78b08d4095228ac6edf594b6139289538b216e6cfb6959b9662769be3d4459f7d4c7d24f7bc2db0aebc4ef3d5139e1ad", 0x84, 0x80, &(0x7f0000000440)={0x2, 0x4e22}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000406050000000000000000000300000805000100070000000900020073797a3200000300"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) setsockopt$inet_opts(r2, 0x0, 0x6, &(0x7f0000000200)="5aea419d4f2bfdf8f30da1938854f8fbbea60e0ddf3a13e2ae31af9a9dfcfaee1b674f8b64d99f73930f567462eacbb96972de6861cc68788d2736cb0c0365deec9328c14960", 0x46) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x440, 0x258, 0x140, 0x140, 0x140, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@ipv6={@remote, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff], 'ip6gre0\x00', 'ip_vti0\x00', {0xff}, {}, 0x2b, 0x20, 0x5, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x401, 0x3, 0x1, [0x4, 0x9, 0x0, 0x401, 0xda, 0x8, 0x81, 0x9, 0x7, 0xaa, 0x6, 0x400, 0x0, 0x4, 0x20, 0x8], 0xc}}, @common=@mh={{0x28, 'mh\x00'}, {'{)', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x1, 0x1], 0x5, 0x20, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "11eb20e72245e6cfaa5dad57c3f3f138bb330fb3a5107618f8fd0b744c7b"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xe, "74db", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2, {0x81}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 15:44:23 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)={0x1c, r5, 0xb631c6b8429a7eb, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40001) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:23 executing program 3 (fault-call:6 fault-nth:8): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 622.215504][T30645] IPVS: ftp: loaded support on port[0] = 21 [ 622.276920][T30691] FAULT_INJECTION: forcing a failure. [ 622.276920][T30691] name failslab, interval 1, probability 0, space 0, times 0 [ 622.289853][T30691] CPU: 0 PID: 30691 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 622.298587][T30691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.308701][T30691] Call Trace: [ 622.312193][T30691] dump_stack+0x1c9/0x220 [ 622.316628][T30691] should_fail+0xa4e/0xa60 [ 622.321169][T30691] __should_failslab+0x255/0x270 [ 622.326299][T30691] should_failslab+0x29/0x70 [ 622.326380][T30691] kmem_cache_alloc+0xd0/0xd70 [ 622.335764][T30691] ? skb_clone+0x328/0x5d0 [ 622.340273][T30691] ? kmsan_get_metadata+0x11d/0x180 [ 622.345572][T30691] skb_clone+0x328/0x5d0 [ 622.349929][T30691] netlink_deliver_tap+0x788/0xeb0 [ 622.355138][T30691] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 622.361313][T30691] netlink_dump+0xe02/0x1ab0 [ 622.365991][T30691] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 622.372147][T30691] ? kmsan_get_metadata+0x11d/0x180 [ 622.377500][T30691] __netlink_dump_start+0xbb2/0xcf0 [ 622.382786][T30691] rtnetlink_rcv_msg+0x14d9/0x1570 [ 622.387963][T30691] ? rtnl_getlink+0x1720/0x1720 [ 622.392882][T30691] ? __local_bh_enable_ip+0x97/0x1d0 [ 622.398228][T30691] ? rtnl_getlink+0x1720/0x1720 [ 622.403175][T30691] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 622.409053][T30691] netlink_rcv_skb+0x451/0x650 [ 622.413866][T30691] ? rtnetlink_bind+0x120/0x120 [ 622.418770][T30691] rtnetlink_rcv+0x50/0x60 [ 622.423244][T30691] netlink_unicast+0xf9e/0x1100 [ 622.428151][T30691] ? rtnetlink_net_exit+0x90/0x90 [ 622.433223][T30691] netlink_sendmsg+0x1248/0x14d0 [ 622.438239][T30691] ? netlink_getsockopt+0x1440/0x1440 [ 622.443655][T30691] ____sys_sendmsg+0x12b6/0x1350 [ 622.448655][T30691] __sys_sendmmsg+0x5b6/0xc90 [ 622.453415][T30691] ? kmsan_get_metadata+0x11d/0x180 [ 622.458666][T30691] ? kmsan_get_metadata+0x11d/0x180 [ 622.463907][T30691] ? kmsan_set_origin_checked+0x95/0xf0 [ 622.469501][T30691] ? kmsan_get_metadata+0x11d/0x180 [ 622.474739][T30691] ? kmsan_get_metadata+0x11d/0x180 [ 622.479976][T30691] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 622.485824][T30691] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 622.491947][T30691] ? prepare_exit_to_usermode+0x1ca/0x520 [ 622.497710][T30691] __se_sys_sendmmsg+0xbd/0xe0 [ 622.502521][T30691] __x64_sys_sendmmsg+0x56/0x70 [ 622.507411][T30691] do_syscall_64+0xb8/0x160 [ 622.511970][T30691] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 622.517884][T30691] RIP: 0033:0x45b399 [ 622.522090][T30691] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.541728][T30691] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.550185][T30691] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 622.558185][T30691] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 622.566181][T30691] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:44:23 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) socket$bt_bnep(0x1f, 0x3, 0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e26560000080049d2e181baf9459c5c95398ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40"], 0x75) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0xc}, 0x3c) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x8000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000200)) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000440)={0x9d0000, 0x97c7, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b0940, 0x8, [], @value64=0x8001}}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast2}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xffffffca}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={r6}, 0x8) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) pipe(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r7 = socket(0x1e, 0x4, 0x0) close(r7) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000a25d8a33080000003e0500000000000095000100e5d6d80034d7cdefbf8349744b632cd41c7841818638283b6b79d40cc5abffbc1a4af97900"/73], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) [ 622.574179][T30691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 622.582176][T30691] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000008 [ 622.715333][ C0] sd 0:0:1:0: [sg0] tag#3677 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 622.725970][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB: Test Unit Ready [ 622.732681][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.742518][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.752318][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15:44:23 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x4352}], 0x7}, 0x0) [ 622.762173][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.771991][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.781742][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.791549][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.801353][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.811163][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.821015][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.830832][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.840643][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.850439][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.860252][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.870047][ C0] sd 0:0:1:0: [sg0] tag#3677 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 15:44:24 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=""/35, 0x23}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) connect(r2, &(0x7f00007a8000)=@pppoe={0x18, 0x0, {0x2, @dev={[], 0x21}, 'veth0_to_bond\x00'}}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) connect$rxrpc(r7, &(0x7f00000002c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 623.206164][T30749] __nla_validate_parse: 17 callbacks suppressed [ 623.206192][T30749] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 623.217877][ C0] sd 0:0:1:0: [sg0] tag#3678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 623.232745][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB: Test Unit Ready [ 623.239367][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.249211][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.259054][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.268898][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.278731][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.288535][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.298355][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.308191][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.318137][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.328067][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.337895][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.347704][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.357612][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.367561][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 623.377400][ C0] sd 0:0:1:0: [sg0] tag#3678 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 15:44:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001fff00000000000000000000000095ae88847d1ff52a1a19c13f0ab72073a4868732a6d718468abff7f2518f4c52570769b403ec1c5e4a2560b7a818fb971a8896e5a9069379fa5d7e319afd6dd7467965dce06bf6608fd905813f5e958a5c21662bc13b0500d4d27da770a361d1afa5c983a8cf2ad70ffed1e65f8224558d3b5b221bb6921e9393657294a79f05685390b94ba6d72f966e82768d2099d8581a7585546122d97cd20f2169aeb5dbeb19773c1f8be734559c6042f4c4d3ef2f7a13936c215cb27ca17d8aa4f8b450cd4edd99d1a7a6d43abe7c5f99", @ANYRES32=0x0, @ANYBLOB="00000000000002002400128007000100697036746e6c44a81400028006000f003a929480d72c4e1181a3673f09384262697725344b99a4f8753e4fda7448347ee6e6ea792d3eb60cf380481c9b2d329bbd7246d6dcc70a54e2fe49cc15b1c9cbc95e76f1e9b2130794877535bea85ac3d30400a7897052e400"/131], 0x3}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 15:44:24 executing program 3 (fault-call:6 fault-nth:9): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 623.555975][T11979] tipc: TX() has been purged, node left! 15:44:24 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 623.695527][T11979] tipc: TX() has been purged, node left! [ 623.715336][T30860] FAULT_INJECTION: forcing a failure. [ 623.715336][T30860] name failslab, interval 1, probability 0, space 0, times 0 [ 623.728530][T30860] CPU: 0 PID: 30860 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 623.737263][T30860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.747375][T30860] Call Trace: [ 623.750787][T30860] dump_stack+0x1c9/0x220 [ 623.755205][T30860] should_fail+0xa4e/0xa60 [ 623.759697][T30860] __should_failslab+0x255/0x270 [ 623.764704][T30860] should_failslab+0x29/0x70 [ 623.769346][T30860] kmem_cache_alloc_node+0xfd/0xed0 [ 623.774613][T30860] ? __alloc_skb+0x208/0xac0 [ 623.779257][T30860] ? kmsan_get_metadata+0x4f/0x180 [ 623.784421][T30860] ? kmsan_get_metadata+0x11d/0x180 [ 623.789683][T30860] __alloc_skb+0x208/0xac0 [ 623.794156][T30860] netlink_sendmsg+0x7d3/0x14d0 [ 623.799070][T30860] ? netlink_getsockopt+0x1440/0x1440 [ 623.804501][T30860] ____sys_sendmsg+0x12b6/0x1350 [ 623.809509][T30860] __sys_sendmmsg+0x5b6/0xc90 [ 623.814263][T30860] ? kmsan_get_metadata+0x11d/0x180 [ 623.819511][T30860] ? kmsan_get_metadata+0x11d/0x180 [ 623.824755][T30860] ? kmsan_set_origin_checked+0x95/0xf0 [ 623.830352][T30860] ? kmsan_get_metadata+0x11d/0x180 [ 623.835598][T30860] ? kmsan_get_metadata+0x11d/0x180 [ 623.840841][T30860] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 623.846691][T30860] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 623.852803][T30860] ? prepare_exit_to_usermode+0x1ca/0x520 [ 623.858568][T30860] __se_sys_sendmmsg+0xbd/0xe0 [ 623.863376][T30860] __x64_sys_sendmmsg+0x56/0x70 [ 623.868284][T30860] do_syscall_64+0xb8/0x160 [ 623.872858][T30860] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 623.878785][T30860] RIP: 0033:0x45b399 [ 623.882729][T30860] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.902383][T30860] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 623.910858][T30860] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 623.918859][T30860] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 623.926863][T30860] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.934859][T30860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 623.942868][T30860] R13: 00000000000008cd R14: 00000000004ca26b R15: 0000000000000009 15:44:25 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r5, 0x5, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x7}, &(0x7f0000000140)=0x8) r7 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r8, 0xc040563d, &(0x7f0000000280)={0x1, 0x0, 0x102, 0x1, {0x7, 0x2, 0x7, 0x7fffffff}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) r10 = accept$phonet_pipe(r9, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0xf4) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f0000000180)=@xdp={0x2c, 0xffffa888, r12}, 0x80, 0x0}}], 0x300, 0x0) 15:44:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000013c0)=ANY=[@ANYBLOB="7cc5bd729d825bdaeade98318f59be0f590d698c09a8ff610d72a9c24b50f19f60e4258e0c0a000028bb6f409ad0dc4dba5e79469b7013cb9b68b1f41d16965f26d33dd6d8a2132f93aecb0b51ed8352a5b0a52cbac11ad2c3ad599f638db6eb8600b640e0eb3d8c6bf6a10edbc31e3ce39489f15d837f0f49b21662e8b6", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x4, 0x8000, 0xffff, r5}, &(0x7f00000000c0)=0x10) r6 = epoll_create1(0x0) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) write$vhost_msg(r8, &(0x7f0000000240)={0x1, {&(0x7f0000000200)=""/21, 0x15, &(0x7f00000003c0)=""/4096, 0x2, 0x4}}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000380)) r9 = epoll_create1(0x0) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008055}, 0x80) socket$inet6(0xa, 0x0, 0x0) keyctl$join(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) ftruncate(r10, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x0, 0x4, 0x4, 0x10000, 0x6c1, {0x77359400}, {0x5, 0x2, 0x3, 0x6, 0x3f, 0x40, "a018ab78"}, 0xffffff01, 0x2, @offset=0x8000, 0x3, 0x0, r10}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) 15:44:25 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb701, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000280)={r5, 0x2a8, 0x6}, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000400)=""/35) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f00000002c0)={0x91c, 0x1c, [0xffff93f8, 0x80, 0x63e3, 0x9, 0x0, 0x9, 0x10001]}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r7, &(0x7f0000000140)='ns/user\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000180)={0xb, 0xfffffffd, {0x57, 0x2, 0x3, {0x80, 0x7}, {0x0, 0xcea}, @period={0x59, 0x3, 0x3, 0x6, 0x7f, {0x1, 0x3, 0x2, 0x3}, 0x8, &(0x7f00000000c0)=[0x9, 0x9, 0x3, 0x6, 0x2c5f, 0x4, 0x6394, 0x1]}}, {0x55, 0x5, 0x1, {0x4, 0xff}, {0xfffd, 0x3f}, @period={0x5b, 0x0, 0x5, 0x63, 0x1000, {0x8, 0x3, 0x7}, 0x1, &(0x7f0000000100)=[0x1]}}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ftruncate(r9, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r10, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}}, 0x4080) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="02002abd7000fcdbdf25150000000c009900030000000000000008000100030000000c00990000000000010000000a001a000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4040) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) 15:44:25 executing program 3 (fault-call:6 fault-nth:10): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x240800, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x50082, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000280)=0xffff9e41, 0x4) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, 0xfffffffffffffffe, &(0x7f0000000240)) sendfile(r5, r1, 0x0, 0x100000000) 15:44:25 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@empty, 0x1c, r4}) r5 = epoll_create1(0x0) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000380)) r7 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) [ 624.782135][T30986] FAULT_INJECTION: forcing a failure. [ 624.782135][T30986] name failslab, interval 1, probability 0, space 0, times 0 [ 624.795067][T30986] CPU: 1 PID: 30986 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 624.803811][T30986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.813919][T30986] Call Trace: [ 624.817304][T30986] dump_stack+0x1c9/0x220 [ 624.821735][T30986] should_fail+0xa4e/0xa60 [ 624.826261][T30986] __should_failslab+0x255/0x270 [ 624.831310][T30986] should_failslab+0x29/0x70 [ 624.836116][T30986] __kmalloc_node_track_caller+0x1c3/0x1200 [ 624.842099][T30986] ? kmem_cache_alloc_node+0x1b0/0xed0 [ 624.847638][T30986] ? netlink_sendmsg+0x7d3/0x14d0 [ 624.852733][T30986] ? netlink_sendmsg+0x7d3/0x14d0 [ 624.857812][T30986] __alloc_skb+0x2fd/0xac0 [ 624.862281][T30986] ? netlink_sendmsg+0x7d3/0x14d0 [ 624.867361][T30986] netlink_sendmsg+0x7d3/0x14d0 [ 624.872289][T30986] ? netlink_getsockopt+0x1440/0x1440 [ 624.877828][T30986] ____sys_sendmsg+0x12b6/0x1350 [ 624.882845][T30986] __sys_sendmmsg+0x5b6/0xc90 [ 624.887611][T30986] ? kmsan_get_metadata+0x11d/0x180 [ 624.892869][T30986] ? kmsan_get_metadata+0x11d/0x180 [ 624.898123][T30986] ? kmsan_set_origin_checked+0x95/0xf0 [ 624.903732][T30986] ? kmsan_get_metadata+0x11d/0x180 [ 624.909003][T30986] ? kmsan_get_metadata+0x11d/0x180 [ 624.914256][T30986] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 624.920116][T30986] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 624.926240][T30986] ? prepare_exit_to_usermode+0x1ca/0x520 [ 624.932020][T30986] __se_sys_sendmmsg+0xbd/0xe0 [ 624.936847][T30986] __x64_sys_sendmmsg+0x56/0x70 [ 624.941754][T30986] do_syscall_64+0xb8/0x160 [ 624.946335][T30986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 624.952264][T30986] RIP: 0033:0x45b399 [ 624.956222][T30986] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.975868][T30986] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 624.984330][T30986] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 624.992339][T30986] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 625.000350][T30986] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 625.008352][T30986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 625.016355][T30986] R13: 00000000000008cd R14: 00000000004ca26b R15: 000000000000000a 15:44:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f00000001c0)=@sr0='/dev/sr0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x100c408, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) unshare(0x8020000) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000300)='mountinfo\x00') ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/16) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) 15:44:26 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x44000, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000080)='comm\x00') r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/netstat\x00') r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x1) [ 625.131344][T30991] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:44:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0xaf9ebb64c5dc47d0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="75394c12381cb8cbe7001200140007000000000000005f736c617665000000000d0045009bfbaf"], 0x3}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a80, 0x2) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 625.421674][T30991] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:44:26 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x7}, 0x16, 0x3) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xe000000000000, 0x410800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0x9c0000, 0x40, 0x7046, r4, 0x0, &(0x7f0000000100)={0x980907, 0x0, [], @string=&(0x7f00000000c0)=0x5}}) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000280)={0x60, 0xffffffffffffffda, 0x4, {{0x0, 0x8, 0x7, 0x0, 0xff, 0x6a, 0x2e, 0x6}}}, 0x60) 15:44:26 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, &(0x7f0000000100)={[0x825]}, 0x8) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) dup3(r2, r1, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x7) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r0, 0x15) 15:44:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 'queue1\x00', 0x2}) r1 = epoll_create1(0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40284504, &(0x7f0000000080)=0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)) epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2c0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 15:44:26 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66a57ddf134306b4bae40f1c9cda8edf100a73d3b0242c46c2a01ad86e20ae438aa4dcafd948f5ec79f9993aa4c6", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2, 0x0) recvfrom$inet(r3, &(0x7f0000000280)=""/93, 0x5d, 0x40000001, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 625.919978][T31122] fuse: Unknown parameter 'f¥}ßC´ºäœÚŽß [ 625.919978][T31122] sÓ°$' 15:44:27 executing program 1: r0 = gettid() ptrace$peekuser(0x3, r0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x28, 0x4000) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000080)={0x4003, 0x8, 0x2, 0x84a}) r5 = semget$private(0x0, 0x3, 0x430) semctl$IPC_RMID(r5, 0x0, 0x0) [ 626.001418][T31167] fuse: Unknown parameter 'f¥}ßC´ºäœÚŽß [ 626.001418][T31167] sÓ°$' 15:44:27 executing program 3 (fault-call:6 fault-nth:11): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000159000)={0x0, &(0x7f0000a7dff8)}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180), 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000001980)={0xf000000, 0x100, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000001940)={0x98092a, 0x2cebe673, [], @p_u8=&(0x7f0000001900)=0xe9}}) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0xffffffffffffffff, 0x20000000) 15:44:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r1 = memfd_create(&(0x7f00000002c0)='@\x1fG1\tb\x19\x82\xdd\xb0\x1e\xe9!/K)\xef\xd0#\xe6~K\x05)\xcfp\xa5\x9cL\xeaM>>\v\xa6&2\xb3\x96\x00\x8b8\xd5\x15\x91Iz}\x8d\xce\xd5\xa8\x18u\x12\x99\xbc\x8e\xcaq\x1a\x9e\bP\x84\x99\x9f\xc6\xa5\f%\x95\x9b\xb2\xb1L\x8d\x94H/%j\x94xY\x889\xf5\x0e\\\xeaP\xaa\xbc\xda\x91^\xef\fNO4%8\xc5\xdcpa\xefqBd\x86g_\xbb-3\xcc\xe8\xae-\x01nn\xa8\xb8\x81Ts\xf9pe\xbd\x1f\t\xbe\xd7y\x03\xa3\xc6?T#\xf5|?\xce?s\xab\xb0\x11\xf5\x7f\x9e\\y\xc2p*.+\xb6\x1f\xa8\x02S\xa7\xd8\r(\x8e\xd7\x9e\"5\xdeJ\xdbi\xcb\xbd\xeb<\x8f\x04a\xdb\x89\x1f\xf7\xc0\xfd\xb9gq@\xf5I\x96\x7f\xe3\x10\x87\xc5\xb2\xe8\x87O\\8\x8aT|mR\xa4\x1e\xbd\x98Z\xd0mF\xb8^\x05\xbe\xf1Pt\xca\xbc\x98\x80l\xcb\xa4\x81ZFj\x1e\x90\x19\xd4\xea3,\xc3u\x19`\xfaI\x1c*\x01[\xf3\x0fv\xbe>\xf0~\xf5\xbdj\xadZ\xd3n\x8d\'n\xf1\xb3\x04T\x89\xa1c\x8e\x95\xdc^pvL\x18\xb1\xf8m\xf8\xea\xc9v\xe8\x16\xd4Y\xb5q\xd3\x9b\xd8\x005\xc1p-@\x8d\x893u\x9e_\xef\xde\xf5\xa9\xd2\xf3\xa1\xf1|\xf5kny\xb0\nW\xa97Q\xf5\xa9\xea\f\x84A7\"\xa4\xc2J\x93C7B&\xdfo?n\xfcj\xc8\x88H\xf3b\x8e\xa0\xdd\x12\xc9>\xf3\x14Y5\x94\xf8w\xda\xb4?z\xf20}\x1d#\n\xb25N\x95>\x06\x1a\xdb\xc0\xcf\xd5\xf1VK\x13\xba\xf0\xb4\xb2\\\xf20', 0x0) pwritev(r1, &(0x7f0000000340), 0x0, 0x81805) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/234, 0xea, 0x3, &(0x7f0000000480)={0xa, 0x4e20, 0x59, @rand_addr="b9c70db63df8f29e1772d35f172bf8f9", 0x52}, 0x1c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x14, 0xc, "b04a82706694a7d154c629f75b71a95a8f3b289271c607adb22d4d534f4cf29cff0359ad514d3aa20d7beebc689ab001521f48dc57122f1b38e9e8af694c0d43", "d66ee438c04045ff21d735bd90f8c3e2c4a016dd0fa49bebf7a08c305bee6fd6"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x28a, 0xae0606a1b2ddc289) close(r3) ftruncate(r3, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000180)={0x1, 0x9, [@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={[], 0x35}, @broadcast, @dev={[], 0x3e}, @remote, @remote, @random='1)L3{s', @local]}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000280)=0x6e8) 15:44:27 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) geteuid() epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 626.512223][T31240] FAULT_INJECTION: forcing a failure. [ 626.512223][T31240] name failslab, interval 1, probability 0, space 0, times 0 [ 626.525065][T31240] CPU: 1 PID: 31240 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 626.533797][T31240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.543897][T31240] Call Trace: [ 626.547282][T31240] dump_stack+0x1c9/0x220 [ 626.551702][T31240] should_fail+0xa4e/0xa60 [ 626.556215][T31240] __should_failslab+0x255/0x270 [ 626.561254][T31240] should_failslab+0x29/0x70 [ 626.565927][T31240] kmem_cache_alloc+0xd0/0xd70 [ 626.570772][T31240] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.576668][T31240] ? skb_clone+0x328/0x5d0 [ 626.581166][T31240] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.587316][T31240] ? should_fail+0x177/0xa60 [ 626.591989][T31240] ? kmsan_get_metadata+0x11d/0x180 [ 626.597294][T31240] skb_clone+0x328/0x5d0 [ 626.601645][T31240] netlink_deliver_tap+0x788/0xeb0 [ 626.606827][T31240] ? __netlink_lookup+0x8b9/0x980 [ 626.611940][T31240] ? kmsan_set_origin_checked+0x95/0xf0 [ 626.617587][T31240] netlink_unicast+0xe87/0x1100 [ 626.622530][T31240] netlink_sendmsg+0x1248/0x14d0 [ 626.627578][T31240] ? netlink_getsockopt+0x1440/0x1440 [ 626.633018][T31240] ____sys_sendmsg+0x12b6/0x1350 [ 626.638054][T31240] __sys_sendmmsg+0x5b6/0xc90 [ 626.642849][T31240] ? kmsan_get_metadata+0x11d/0x180 [ 626.648130][T31240] ? kmsan_get_metadata+0x11d/0x180 [ 626.653401][T31240] ? kmsan_set_origin_checked+0x95/0xf0 [ 626.659032][T31240] ? kmsan_get_metadata+0x11d/0x180 [ 626.664307][T31240] ? kmsan_get_metadata+0x11d/0x180 [ 626.669578][T31240] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 626.675467][T31240] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 626.681615][T31240] ? prepare_exit_to_usermode+0x1ca/0x520 [ 626.687426][T31240] __se_sys_sendmmsg+0xbd/0xe0 [ 626.692276][T31240] __x64_sys_sendmmsg+0x56/0x70 [ 626.697205][T31240] do_syscall_64+0xb8/0x160 [ 626.701802][T31240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 626.707753][T31240] RIP: 0033:0x45b399 [ 626.711729][T31240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 626.731399][T31240] RSP: 002b:00007f06e43fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 626.739894][T31240] RAX: ffffffffffffffda RBX: 00007f06e43ff6d4 RCX: 000000000045b399 [ 626.747932][T31240] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 626.755961][T31240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 626.763989][T31240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 626.772016][T31240] R13: 00000000000008cd R14: 00000000004ca26b R15: 000000000000000b 15:44:27 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffc}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:28 executing program 3 (fault-call:6 fault-nth:12): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0xc0044d03, &(0x7f0000000080)) [ 627.424599][T31367] FAULT_INJECTION: forcing a failure. [ 627.424599][T31367] name failslab, interval 1, probability 0, space 0, times 0 [ 627.437960][T31367] CPU: 0 PID: 31367 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 627.446698][T31367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.456800][T31367] Call Trace: [ 627.460173][T31367] dump_stack+0x1c9/0x220 [ 627.464598][T31367] should_fail+0xa4e/0xa60 [ 627.469127][T31367] __should_failslab+0x255/0x270 [ 627.474147][T31367] should_failslab+0x29/0x70 [ 627.478793][T31367] kmem_cache_alloc_node+0xfd/0xed0 [ 627.484051][T31367] ? __alloc_skb+0x208/0xac0 [ 627.488680][T31367] ? kmsan_get_metadata+0x4f/0x180 [ 627.493832][T31367] ? kmsan_get_metadata+0x11d/0x180 [ 627.499090][T31367] __alloc_skb+0x208/0xac0 [ 627.503570][T31367] netlink_sendmsg+0x7d3/0x14d0 [ 627.508492][T31367] ? netlink_getsockopt+0x1440/0x1440 [ 627.513897][T31367] ____sys_sendmsg+0x12b6/0x1350 [ 627.518908][T31367] __sys_sendmmsg+0x5b6/0xc90 [ 627.523657][T31367] ? kmsan_get_metadata+0x11d/0x180 [ 627.528895][T31367] ? kmsan_get_metadata+0x11d/0x180 [ 627.534134][T31367] ? kmsan_set_origin_checked+0x95/0xf0 [ 627.539752][T31367] ? kmsan_get_metadata+0x11d/0x180 [ 627.545019][T31367] ? kmsan_get_metadata+0x11d/0x180 [ 627.550268][T31367] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 627.556124][T31367] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 627.562237][T31367] ? prepare_exit_to_usermode+0x1ca/0x520 [ 627.568009][T31367] __se_sys_sendmmsg+0xbd/0xe0 [ 627.572818][T31367] __x64_sys_sendmmsg+0x56/0x70 [ 627.577715][T31367] do_syscall_64+0xb8/0x160 [ 627.582299][T31367] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 627.588216][T31367] RIP: 0033:0x45b399 [ 627.592162][T31367] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 627.611806][T31367] RSP: 002b:00007f06e43ddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 627.620270][T31367] RAX: ffffffffffffffda RBX: 00007f06e43de6d4 RCX: 000000000045b399 [ 627.628272][T31367] RDX: 0492492492492805 RSI: 0000000020000140 RDI: 0000000000000003 [ 627.636381][T31367] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 627.644384][T31367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 627.652381][T31367] R13: 00000000000008cd R14: 00000000004ca26b R15: 000000000000000c 15:44:28 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000040)=0x5) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r3 = socket$inet6(0xa, 0x49d2f8de978f755e, 0xf7) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e21, 0x8000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0x8d77}}}, 0x3a) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x1400000006, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x0, 0x0, 0x0, {0x8, @sliced}}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:28 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8204, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x7}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:28 executing program 0: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 628.016529][T31482] device lo entered promiscuous mode 15:44:29 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_STA_WME_MAX_SP={0x1b, 0x2, "87f6e1286977461d9175c5965656649e38f66a1fddb14b"}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xaf}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd3}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x6ba44af99b2c55bb) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) setpriority(0x0, r4, 0xfff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x1c0, 0x10, 0x2, 0x3, 0x0, {}, [@IFLA_VF_PORTS={0x160, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bf40444b3dbee6f96606eafc67c208db"}, @IFLA_PORT_REQUEST={0xfffffffffffffe04, 0x6, 0x3f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "28fbd4dd5b0857d890dde43ed9635e75"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65e21eb6b494d7e425ed3312bcc5be88"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "62a4027f6f04003a95f2f9691be82351"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x68}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x101}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2e4ae97d46da38cd5fb585d1b776e855"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_PROFILE={0x10, 0x2, 'vboxnet0em0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "15b6dd32dba6f6cf948113a2684180b9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ee4a3c769e42afd14ecca11c99a3de9e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "26cacd3f391061e2428756b3cd4d0261"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b1dd7b70377096df7d922b02db299be3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "369276e301abdbfed71cc5e78849f9a7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ec317bee3fe85351789151cf551f8ff6"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7fff}, @IFLA_PORT_PROFILE={0x6, 0x2, '^\x00'}]}]}, @IFLA_PHYS_PORT_ID={0x1b, 0x22, "85e22296dfb75cf3ccaaee33bfc5855f5e805bd92d567c"}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0xa}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x8}, @IFLA_XDP_FD={0x0, 0x1, r1}, @IFLA_XDP_FLAGS={0x0, 0x3, 0xa}]}, @IFLA_IFALIAS={0x14, 0x14, 'syzkaller0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x1c0}}, 0x0) 15:44:29 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 628.480917][T31492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:44:29 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0x100) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:29 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r3, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}}, 0x4080) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x4004001) close(r1) ftruncate(r1, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty}, 0xfffffe64) listen(r0, 0x4) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f0000000040)=""/253) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockname$inet(r6, &(0x7f0000000340)={0x2, 0x0, @initdev}, &(0x7f0000000380)=0x10) 15:44:29 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x2, 0x70, 0x7, 0x94, 0x1f, 0x5, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp, 0x29a31, 0x8, 0x80000000, 0x1, 0x9a, 0x4d5e, 0x6ba}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:29 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) write(r1, &(0x7f0000000080)="244795001a005f0014f9f4070009040002002000ffff0064744cfaec272304000000a000", 0x24) 15:44:30 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x2}) close(r2) ftruncate(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f00000000c0)=0x68d3) close(r5) ftruncate(r5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r5}) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r7, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 629.270866][T31492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:44:30 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:30 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRESOCT=0x0, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:30 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc) 15:44:30 executing program 0: unshare(0x20400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x7587b000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 15:44:30 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x2e, 0x3, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0x80) listen(r0, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000140)=0x81) connect(r4, &(0x7f00007a8000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0xfffffffc, @ipv4={[], [], @empty}, 0x80000000}}}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:30 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x480}, 0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x32, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500100f27aea7ad51d1410396800240007050000", @ANYRES32=r2, @ANYBLOB="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"], 0x3}}, 0x4a7b3efcc8fdc2b8) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 630.104294][T31843] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:44:31 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0xc00}], 0x2, 0x0) 15:44:31 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 630.410480][T31843] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 15:44:31 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002c3000/0x1000)=nil, 0x1000, 0x0, 0x2c3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) 15:44:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000000000000000009e"]}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x8, 0x97, "8dddeccf17dbae027e839dce211a989d2f3ef17125a8d9f7c3f8a9288a182fb83c9488114db468a7740f3bac6ac2970a9b19b8933e77f118315c683b7fadc23797465c906efcccb5367ec572f2a512c4124f4695c97b8e7d4335f2ce234cb66e7d5e22f3847365b590e471c9af27255b0d5d2a2236a6722d9c4beea96e5171901b3e302b7ad4bebe18d2455f40f915c52dea5fe36145d0"}}) 15:44:32 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, {0xa, 0x4e24, 0xb52df13f, @local, 0x53}, r2, 0x800}}, 0x48) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:32 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x16, @rand_addr=0x5, 0x4e22, 0x4, 'ovf\x00', 0x8, 0x9, 0x73}, 0x2c) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8054) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000040)) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000000c0)={0x7, 0x20, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x80, 0x4e, 0x0, 0x0, 0x10000000000041c4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000940), 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x8}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) unshare(0x60020000) [ 631.376639][T31993] IPVS: ftp: loaded support on port[0] = 21 [ 631.589153][T31994] IPVS: ftp: loaded support on port[0] = 21 15:44:32 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001017369000800000008000200000000000000000000fda4a7a74d8042233d7f58d6236a86765a42367934d39b678d17e8cb3a65e35911d1450bb77c52258af1e438fb082d47d77d7213a535a7a6cf2d3d425ee2e6246a875d9316ec58955a68b8fd91f79eebb5e5aa556c0a8521c43fb69e72dd60", @ANYRES32], 0x40}}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:44:32 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x9, 0x4) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x6c705) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) r5 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x20002, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:32 executing program 5: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) epoll_create1(0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0x1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x17, 0x0, "41918950d4800a9fabad28962b9b608ffaaaa66d103e032ec1e5a8f3b1738769743cb4ae9136a1235ab4a22a86d85bd2fedcd92f56a4fb9c10a90e1627129ebd", "3757db0000000064224e7384b0e3c0a9871dd92fa6d6cac649097a33ef5d2059b1ea0463620ed9b3d9354770520ac7ddf1b5b24c855c3b5878199794ed831344", "7c4b57fefa2814f0acb2c280b4632b2ba50bdb2f1c61c475adbe962cab678cb0", [0x0, 0xfffffffffffffff7]}) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000180)=""/135, 0x57}], 0x1) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_data=0x0}) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c840}, 0x8000) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c004}, 0x20000040) [ 631.855315][T31998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 631.866143][ T276] tipc: TX() has been purged, node left! 15:44:32 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x60) r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x1}) syz_emit_ethernet(0x300cce, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaacbaa0000000000008100000086dd60b409000003000002024300800080000000ffffe0000002ff0200000000000000000200000000013c0090780007040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 15:44:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2000000000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={0x0, 0x7e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x503}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffe0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3d9e}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x800c014) 15:44:33 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x7f, 0x2, 0x1f, 0xc, 0x0, 0x9, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x33cd, 0x7fff}, 0x0, 0x4, 0x81, 0x6, 0xffffffffbc3b1e1e, 0x59ff, 0x5}, 0x0, 0x5, r1, 0x1) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) read$char_usb(r4, &(0x7f00000000c0)=""/25, 0x19) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:33 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000040)) 15:44:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x6, 0x0, 0x1, {0xffff, 0x80000001, 0x9, 0x4}}) clone3(&(0x7f0000000280)={0x40000000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x1) [ 632.998808][T32129] IPVS: ftp: loaded support on port[0] = 21 15:44:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in=@dev}}, {{}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x18b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x4010) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5001000010000307ebff0006f2c6000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000003ee42e48bfa77148452e00000000d69a7b65ec5bc80cfc3482f2e966fccf793528e16b22963b2e262ba525f5eb501a1efd57d1d139ff38b2fbfff620a20828e9ac9d1daf56299b6481a3d33a7aa2f8a40a2599de03cb1a030209000000000000006a418052131202b95990939812eec16b5bf83cb2d6641b2fc22d722d98a64bb4c2402fe3f656ba69456f25ac84049c075873d70091f2ba82b60074bf76c115e454ce88477819b0ce7f1ab3066e7e0dcb361fc0ccb8ae89cf515d9098ce555b6692c0df11531ab1ae1379260989c97c32ab4aa9659f042b85ad07000000cacf7d299c65917a5da2de6a106b061a883b148ebe4a01f835cf4ca813559fb5e236460400c174651b7b219e37a03d81fffffffff11c93d0c7f9c15629abb8b6181a731526180c6b45ed29f5ad68f138c938a83a8c17f7fc44059fa50859c43429fa6004c5dfaad0da6c7afe9aac62d6440a8fbaf93541feb9e70ce836618f57fe85f8bd014e9c1fe9e3559361e8bd2a7b800006405f2230c463eee478dbaa89e33cd5599a43de39e50b0e3160f7de3b7b55e8c003d8d3df8ceed367edd58594885af6e18ed4a998f26a2718184b6c9649e75e60b2f5d17fc48a9e10fc63c2a3fbb2f12755d6603aae44a76df02e90af7918973673598c8a83c4e88e2a512af57976ebf0e09cede40fdd72efbdc55ce6b622ad5d48e989c153d11986d44765bdf1771dc31eee909d06912ca0005ed9c8398d95d25718b61b9e2cdb590da0ae8d207129d21d4ff00de53686c7ea716bf6b6dae1ea0a68c9d65a20f1f4a2010460374ad25e7245b179ab217da43b70a2c3f7da7ad514b494093940e46aadff740363a92e68b1c193d47b9a6fef822915d83ad48941d58e43b6046e24977448303409837c6aa40e5ca4b67e07fbebdf49d5ea12041dab1174c30cab54b2b5f129052afc7c348c46e3827db5b856b8bf0317654a65"], 0x200}}, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e24, 0x4, @ipv4={[], [], @local}, 0x3c37000}}, 0x7, 0x1}, 0x90) r7 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x101000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xffffffffffffffc0, 0x0, 0x10003, 0x5664}) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, &(0x7f00000000c0)={0x7f, r8, 0x0, 0x2}) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'team_slave_0\x00'}}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) [ 633.377257][T32199] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.406829][T32199] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.501400][T32217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 15:44:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000340)={@host}) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x602800, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000b5c000/0x1000)=nil, 0x1000}, 0x1}) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x4000) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000001400)={0x4, @sdr={0x0, 0x3}}) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f00000003c0)=0x24) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x235) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000002b00)={0xffffffff, 0x4, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x4, 0xc, 0x7, 0x9, 0x2, 0x54, "57875ac7"}, 0x63b, 0x0, @planes=&(0x7f0000002ac0)={0x6, 0x1, @fd=r6, 0x4}, 0x3, 0x0, 0xffffffffffffffff}) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000002b80), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000300), 0x12) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000100)={0x230, 0x6, 0x7, {0x0, 0x7}, 0x20, 0x64}) gettid() 15:44:34 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="06490100000000001400178009000100000000000000000004000280"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x2, 0x14, 0x90, 0x6, 0xfc, 0x4, 0xfe, 0x3, 0x500}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r10) r11 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="ff030dba58232ef2957ffe7b05dcf71895fb9d71f85febd4e6d933fd3d7055303a2541d26e05cdd0efcdd45bc1094c86cb6d36495226135249d8adc6f5a66f41761ca9ee8c54912851f47f80da174bbdcdab36aa351f44d965a1c8c1bab7caa60366f895103690a4e8de556292d3dec40826fbb183697767026f41693bc39ce5b44f943754bdee1056eb5078b1175e517dc92d6e1cf293ff28553aaff326a077afe25efab05483f17ef7ee0eb0b1", 0xae, r10) r12 = add_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="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", 0x1000, 0xfffffffffffffffc) r13 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r13) keyctl$KEYCTL_MOVE(0x1e, r11, r12, r13, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000300)=0x10000) ftruncate(r9, 0x0) splice(r8, &(0x7f0000000240)=0x5, r9, &(0x7f00000002c0)=0x1000, 0x6, 0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c0002000800050000000000080005000000000038000300050000000000000028ceb860244d6a9b5336c1abe5b92f2f00000000000000000000000000000002000000000000da6e0856d62c"], 0x7c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:44:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x8001}, 0x10) close(r4) ftruncate(r4, 0x0) fcntl$setsig(r4, 0xa, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', r7}) 15:44:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa2, 0x8, 0x0, 0x1, 0x1, 0x400, 0xffffffff, 0x8001, 0x3f, 0x7f, 0xb1, 0x6, 0x4, 0xfffffffb, 0x10, 0x4, {0x8, 0x2}, 0x5, 0x2}}) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:35 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000000)={0x5, 0x0, 0x3002, 0x80000001, 0xfe, {0x2, 0x9}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:35 executing program 2: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0xd000]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSIG(r2, 0x40045436, 0x2c) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) 15:44:35 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) poll(&(0x7f0000000040)=[{r1, 0x124}], 0x1, 0x8f) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:36 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000540)=0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x5, 0x1ff}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x1000, 0x40}, &(0x7f0000000300)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) recvfrom$phonet(r5, &(0x7f00000000c0)=""/174, 0xae, 0x12101, &(0x7f0000000000)={0x23, 0x6, 0x1, 0x7}, 0x10) socket$inet6(0xa, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180), 0x4) r6 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x0, 0x100) readv(r6, &(0x7f0000000500)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 635.002055][ T276] tipc: TX() has been purged, node left! 15:44:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @loopback}, @in, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, @in={0x2, 0x0, @broadcast}]}, &(0x7f0000000180)=0xffc3) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f00000000c0)="4b3d1274d1d3cbadc119b450e631e41df1f098970ddcbd8c82e7826d5c09aeafacc69b1e5c8d5519e9f48646c373e164cf39f1cefd705df7f8a9e9a9609bc8893992bb6c2e14f6a1127654e4a91b0e1e88a7f1ab30a99d5f35858102293b69d56da9eb1799782e51aa76122fc419cee69f79750206cbf7f3b1e25bbfa315c1491af19a59b0e5b1d92ae94f36982606019225b4e019d624ddbeb64791cfd00947ae11409175adfefa8a49e3ecd9211a5acbf706") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x7, @local, 0x7}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x3}, @in6={0xa, 0x4e21, 0x7, @local, 0x3}], 0x58) [ 635.162341][ T276] tipc: TX() has been purged, node left! 15:44:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000040)={{0x2, 0x0, @reserved="652654916231195b6414363d9e384f2d953d8fa619dcde36f13e4b5945ed9f6c"}}) 15:44:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000500)='#', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xffffffda}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, 0xa5f, 0x9}, &(0x7f0000000140)=0x90) 15:44:39 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_data=0x0}) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c840}, 0x8000) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xff, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x208100, 0x0) pipe(0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x40726a71f34f371b, "1caf7757dde453ca"}) r3 = dup(0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0x20, 0x7}) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4, 0x1}, {0x3}}], 0x8) getpgrp(0x0) capget(0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x80400, 0x0) timerfd_settime(r6, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006ba}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f00000001c0)={0x6, 0x8, 0x4, 0x10, 0xb7a7, {0x0, 0x2710}, {0x2, 0x2, 0xb4, 0x2, 0x10, 0x40, "6ed9236c"}, 0x5, 0x3, @fd=r2, 0x9, 0x0, 0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000280)=0x101) timerfd_create(0x3, 0x400) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffbf51bf}, 0xc) unshare(0x60040000) 15:44:39 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x4000) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xc}, @dev={0xfe, 0x80, [], 0x33}, @dev={0xfe, 0x80, [], 0xd}, 0x8, 0x96a, 0x2, 0x400, 0x1, 0x900000, r6}) r7 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000002c0)={{0x3, 0x3ff, 0x1ff, 0x7193}, 'syz0\x00', 0x39}) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) ftruncate(r10, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) ftruncate(r11, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r12, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040000) 15:44:39 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000540)=0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r3 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x5, 0x1ff}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x1000, 0x40}, &(0x7f0000000300)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) recvfrom$phonet(r5, &(0x7f00000000c0)=""/174, 0xae, 0x12101, &(0x7f0000000000)={0x23, 0x6, 0x1, 0x7}, 0x10) socket$inet6(0xa, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180), 0x4) r6 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x0, 0x100) readv(r6, &(0x7f0000000500)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xcdc, 0x44800) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x40045109, 0x7ffffffff000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r3, 0x40045109, 0x7ffffffff000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x13, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x49084}, 0x1) [ 638.574156][T32725] IPVS: ftp: loaded support on port[0] = 21 15:44:39 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400e50d000000000000000000001a00", @ANYRES32=r3, @ANYBLOB="00000000ffffff3f000000eb46000000686866000c0008a026f5a6a197fc28010e777988c833ba8fdf812f64d70bc08698bb247e8a6d0a42af6ba352bd2b41f846174f80daedc95eb005133234fc8526299186b7862129f09037e01def29ac4ea48807e1bc3cb3c25987481ab9d6b9b224a9f585a0ef4d192c3cfe11c055acc726b85ccdcd46b0f064ed2d932281bad57fd6d98cfc6d1f3c9f2760544a025b73b6eb31d88d55bb914e16dbdb62b79add448206d8278ac880ea4cb23837ebf1bb0ff204267296a46d813fd5"], 0x3}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x26400, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r6, 0x0, r0, 0x0, 0x100000000, 0x0) 15:44:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x3) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3d, 0x4000) 15:44:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044804}, 0x24000041) r1 = socket(0x15, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, 0x0, 0x2000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x717000) [ 638.889098][ T367] IPVS: ftp: loaded support on port[0] = 21 15:44:40 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, [], [{0x20, 0x7, 0x8, 0xffffffff, 0xb3b, 0xffffffff}, {0x8, 0x4, 0x3, 0x2, 0x2, 0x7f}], [[], [], [], []]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:40 executing program 0: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0xc07e, 0x8, &(0x7f0000000040)=[0x40, 0x3, 0x7, 0x1, 0x3f80, 0xfff7, 0x7ff, 0x2], &(0x7f0000000080)=[0x7, 0xb9, 0xe2, 0x200, 0x7, 0x40, 0x0, 0x0], &(0x7f00000000c0)=[0x1]}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x0, &(0x7f0000000000)='no\x1a\x16\x11,lin\x1c\n\x00\x00\x01\x00\x00\x00q\x00') 15:44:40 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in], 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000e67000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0x805, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000180)={0x18, 0x1, 0x9, 0x7ff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000000)) getsockopt(r3, 0x114, 0x2717, 0x0, &(0x7f0000000140)) [ 639.332039][ T533] tipc: TX() has been purged, node left! [ 639.553796][ T496] gfs2: Unknown parameter 'no' 15:44:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40001, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000280)={0x9, 0x1, 0x3, 0x0, r5}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) dup3(r3, r6, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0027000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) name_to_handle_at(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xc4, 0x10001, "38fb5fe682f66be0bab5a46750dfca2a2d8f671cfd668c775ae4f5a0839c7f4320005b4ddb9ea9b652e9d09a857aa3bf7ce9ec47efef22b6d13bad737a847a2abca59c11bf6e19d3c5c48eba00aeaa8e883faf084b460eab25f5ccec33bc8a6b381b1ba5252b219e70818753e6c3b325c6af412600381c62f1af1df02bd2734f3a520abebaf6e1ded1a56b59c8a2170e4b26a6de48237b294fc8e84c740f78e5c81be60085adafbd8459d83edc99cb19cf905cfa56324ff61839af0d"}, &(0x7f0000000200), 0x1400) 15:44:40 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x1f) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80800) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = accept4(r2, 0x0, 0x0, 0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000100), 0x4) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x52}, @cond=[{0x7, 0x8, 0xeb38, 0x7, 0x101, 0x101}, {0xffff, 0x1, 0x9f61, 0x2, 0x8, 0x33ae}]}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/114) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x280) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 15:44:40 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x103, 0x4, {0xfff, 0x3686, 0x5, 0x1}}) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000140)={'macsec0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}) syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x4, 0x141000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 15:44:40 executing program 4: prctl$PR_SET_DUMPABLE(0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x210001, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet(0xa, 0x801, 0x0) listen(r1, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x352) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x9) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) io_setup(0x1, &(0x7f00000001c0)=0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x101a06, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005002}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)=0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={0x1, &(0x7f0000000380)="938bb8e0855ec854554c7b401d678952b835d77bd568b2910d01231125e3a07f562486db98eb20366368dfe0f82c0f60feeed665ab28a1255aabb015d1e6460ee8315b335e275a7333504d4b2e8626583ffbd22de1a44351c96cd201d935142978d7efdd9536708bd44c43178afe99a7ada5498acad712d4ec5720567c91d7f86b7e3d6e22ade561486ff7b6d52e06e160601142afa532282a810d8c2f28a60d30bce86b71e1768f342ac77486621bfc524e7761187a3916e66dffe30838292e9419e2b635af36f52ed59d6572c6a94af4c686d8d4d524ff156efcd78129e117f1bae8e6f769cc92998367dc83f2bbbc1c0eb9ccec", &(0x7f0000000080)=""/43, 0x4}, 0x20) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000180)) io_submit(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x4}, {0x3f, 0x8, 0x6}, {0x7f, 0x5, 0x9, 0x8}, {0x2000, 0x1f, 0x41, 0x5}]}, 0x10) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60020000) [ 639.978778][ T510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 15:44:41 executing program 2: newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x6000) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={r0, 0x58, 0xd0}, 0x0, &(0x7f0000000280)="0f2b87202cb0765c72162e9942bcb2a73e2ee3d2b039d0fd7f85b0090b3ce5eb0260efd937504a537db7d989b447b81b344a991b4ddabfa84f8ac52da54840dffb1e62e813b5aa8226ad2a7d35c88eff88360ace82658512", &(0x7f0000000300)=""/208) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/172, &(0x7f0000000200)=0xac) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)=0x3, 0x4) close(r2) ftruncate(r2, 0x0) fstat(r2, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40000000000010000000000000000001800000007000a000000000002760684885a60ad6361e63c3f0000003e60a90b38b34f6ff3d27c1cccb9fee93fea95ed9d31b1c0b787ce837cfd10ae1221bc4ecaa5383b4a3cdaa536b11d7c96451a6657d888b30c911a2d4d8e537621d4abe0e3697f0a72778af50000000000000000000093ea4489c88a1bb805265e4dc75c2661d7cdf62da03b45b9a5f01e0dd8677d06164654e334a65f802eeb175eb7cce98cd38353f80742964dcb23e3b80b360d115db628926d5a6e11cec34095da07fc42e0c0cbab8a28669320a6fceae5022ac3"], &(0x7f0000000500)='GPL\x00', 0x80000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 640.193066][ T522] IPVS: ftp: loaded support on port[0] = 21 15:44:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f00000000c0)) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ftruncate(r5, 0x0) write$P9_RLOCK(r5, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:41 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x4) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 640.966315][ T642] IPVS: ftp: loaded support on port[0] = 21 15:44:42 executing program 2: pipe2$9p(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(r2, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) close(0xffffffffffffffff) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x5}, 0xb) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r4, 0x0, 0x0, 0x6}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x8, 0x9, 0x8, 0x4307, 0xe138, r4}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x20}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990afc, 0x5, [], @p_u16=0x0}}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 15:44:42 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x608040, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000001c0)={[0x8, 0x5, 0x5, 0x8000, 0x80, 0xa26f, 0x200, 0x7, 0x1, 0x2, 0x0, 0x2d, 0x7, 0x9, 0x7f, 0x4, 0x80000001, 0x9, 0x401, 0x3b, 0x2, 0x3, 0x3ff, 0xfffffeff, 0xfb4, 0x7, 0x5, 0x7, 0x7, 0x121, 0x4, 0xaf7d, 0x1, 0xffff0000, 0xfffffffa, 0x80, 0x8, 0x1, 0x2, 0x6, 0x7, 0x2, 0x1, 0x1, 0x9, 0x6, 0x5058, 0x80, 0xfff, 0x80000000, 0xc68, 0x5f54, 0xffffff29, 0x1, 0x5, 0x1, 0x9, 0x8, 0x2, 0x7fff, 0xfbd0, 0x9, 0x401, 0x7fff, 0xffffffff, 0x8, 0xb40f, 0x7, 0x2, 0x2, 0x6, 0x69b6, 0xffffffff, 0x3, 0xcc8, 0x10001, 0x4, 0x8, 0x8, 0x2, 0x7, 0x0, 0x0, 0x3, 0xfffffffe, 0x80000001, 0x2, 0x1000, 0x9, 0xd3, 0xffffffff, 0x7f, 0x2d, 0x4, 0x800, 0x6, 0x6, 0xa589, 0x7ff, 0x9, 0x4, 0x1, 0x6, 0x5, 0x81, 0x20, 0x8, 0x3, 0x0, 0x8000, 0x4, 0x7fffffff, 0x2, 0x9, 0x10001, 0x71c, 0x81, 0xa8, 0x0, 0x7f, 0xff58, 0x9, 0x9137, 0x5, 0xd4a7, 0x1, 0x40000, 0xffffffff, 0x9, 0x1000, 0x4, 0x3, 0xee, 0x4, 0xfff, 0x3, 0x7fffffff, 0x4, 0x1, 0x7, 0x2, 0xaebd, 0x200, 0x1ff, 0x200, 0x3, 0x4, 0x389f, 0x6, 0x8001, 0x2, 0x401, 0x0, 0x9, 0x800, 0x200, 0xffff, 0x800, 0x5, 0x1, 0x6, 0x0, 0xffffff98, 0x1ff, 0xffffffff, 0x1, 0x7fff, 0x7f2, 0x200, 0x0, 0x10000, 0x2e8f, 0xc, 0x1, 0x4, 0x6, 0x0, 0x6, 0xb0, 0x4, 0x200, 0x8001, 0x1, 0x2, 0x40, 0x71c0, 0xff, 0x2, 0x3ff, 0x3, 0x9, 0x0, 0x8, 0xfffffffe, 0xab3, 0x9, 0x101, 0x80, 0x8, 0x0, 0x1, 0x6, 0x4, 0x183, 0x2, 0x7, 0x1ff, 0x2, 0x4, 0x7fff, 0x7fff, 0xffffff6d, 0x0, 0x7ff, 0xc8cf, 0x3, 0x3, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1ff, 0x903, 0x3ff, 0x7, 0xc57, 0x1f, 0x2, 0x6, 0x8000, 0x80000000, 0x7, 0x7, 0x0, 0xfffff000, 0x4, 0x5, 0x6, 0xe1a, 0x400000, 0x7, 0x2, 0x1, 0x3f, 0xffffffc1, 0x5, 0x42c2e80b, 0x81, 0x9, 0xf8, 0x0, 0x10000, 0x4, 0x4, 0x8, 0x4d, 0x7, 0x6, 0x5, 0xfd8a, 0x10000, 0x0, 0x3, 0x6205, 0x1f, 0x0, 0x7ff, 0x90000, 0x8a, 0x9, 0x0, 0x3523, 0x1, 0x7ff, 0x1, 0x800, 0xa0, 0x929e, 0x7, 0x400, 0x6, 0x9, 0x4, 0x3ad8, 0x81, 0x8, 0x4, 0xe830, 0xffffffff, 0x3c7b, 0xed7, 0x101, 0xffffffe0, 0x3, 0x7, 0x5, 0x3, 0xfffffff8, 0x800, 0x1, 0x7, 0x8000, 0x8, 0x8, 0x8511, 0x5, 0x10000, 0x1, 0x7, 0x80000001, 0x6, 0x1000, 0x2e5e, 0xff, 0xb9f, 0x2, 0x170dc2f2, 0x2, 0x14e8, 0xd6, 0x5, 0x100, 0x6, 0x1, 0x86d2, 0x9, 0x6, 0x5, 0x2, 0x9, 0x7, 0x7, 0x52, 0x2, 0x7, 0x3, 0x200, 0xffffa195, 0x100, 0x1, 0x3570, 0x7, 0x8, 0x16c2, 0x5, 0x8, 0x100, 0x7ab, 0x80000001, 0x47d3, 0xbfb, 0x6, 0x20, 0x35, 0x0, 0x14000, 0x3f, 0x8, 0x10000, 0xfb6d, 0x9819, 0xffffff99, 0x2, 0x4, 0x10001, 0x5, 0x1, 0xff, 0x100, 0x3, 0x7, 0x10000, 0x38a491ed, 0xaed, 0xcd, 0xfffffffb, 0xa9, 0xfffffee6, 0x0, 0x20, 0x3, 0x81, 0x9, 0x2, 0x6, 0x1, 0x8, 0x0, 0x0, 0x7ff, 0x9, 0x96bd, 0x0, 0x80000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2458, 0x6, 0xffffffff, 0x4, 0x3, 0x2, 0x1000, 0x3, 0x0, 0x2, 0x8, 0x3, 0x81, 0x9, 0x1, 0x4, 0x1, 0x8d6, 0x8, 0x80, 0x401, 0x9, 0xf8da, 0x1, 0x4, 0x4, 0x8, 0x4, 0x4, 0x0, 0x5, 0x400, 0x401, 0x5, 0x401, 0xfffff801, 0x2, 0x68d, 0x4, 0x8, 0x42e8ee19, 0x400, 0x7, 0x3, 0x100, 0xffffffa5, 0x7, 0x6, 0x8000, 0x20, 0x3ff, 0x6, 0x5, 0x20, 0x4, 0x0, 0x6, 0x8, 0x7ff, 0x3ff, 0x6bc, 0x7, 0x5, 0x9, 0x3, 0x7, 0x280, 0xfffffffd, 0x85, 0x2, 0xfe, 0x7fff, 0x6, 0xe5d9, 0x30ff, 0x4, 0x9, 0x2, 0x2, 0xfffffffd, 0x1, 0xffffffff, 0x4, 0x5, 0x7f, 0x1, 0x0, 0x7, 0x0, 0x7, 0x8000, 0x89a, 0x3, 0x8f2, 0x7, 0x200, 0x1, 0x9, 0x101, 0x8, 0x7, 0x7f, 0xfffffffa, 0xed00, 0xd1d4, 0x565, 0x0, 0x3, 0x1, 0x2, 0x4, 0x7fff, 0x4, 0x0, 0x1f, 0x1, 0x9, 0x3, 0x9, 0x200, 0x1, 0xffffffc1, 0x9, 0x400, 0x1, 0x5, 0x1000, 0x3, 0x80000000, 0x1226, 0x5d31d359, 0xfff, 0x7f, 0xffff, 0xffffffb1, 0x7c11, 0x9, 0x80000000, 0x0, 0x1, 0xffff, 0xfffffffc, 0x7fffffff, 0x2, 0x7fffffff, 0x7e1, 0x6e, 0x5, 0x4, 0x3, 0xffff7fff, 0x8, 0x1, 0x0, 0x5, 0x24, 0x6, 0x9cd, 0x0, 0x0, 0x6, 0x7, 0x2, 0x80000001, 0x6, 0x3ff, 0x4, 0x9062, 0x7, 0xec4f, 0x1, 0x6, 0x9, 0x8, 0x6, 0x5, 0x6, 0x5, 0x80000001, 0x80, 0x0, 0x5, 0xffffdd31, 0x7, 0xfffffffa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0x400, 0x101, 0x6, 0x6, 0x7, 0x0, 0x4, 0x7, 0x5, 0x7, 0x401, 0x3, 0xfff, 0x9, 0x401, 0x40000000, 0x2b9b00, 0x1, 0xfffffeff, 0x2, 0x35, 0x0, 0x6, 0x0, 0x9, 0x3ff, 0xfffffff7, 0x81, 0x6b, 0x2, 0x7fff, 0x5, 0x10001, 0x0, 0x7, 0x0, 0x4, 0x917, 0x20, 0x101, 0x0, 0x3, 0x83, 0xd849, 0x0, 0x8, 0x1, 0x8, 0x800, 0xffffffff, 0x4, 0x9, 0xb6, 0x7, 0x10000, 0x4, 0xfffffffc, 0x100, 0x8, 0x0, 0x9, 0x1, 0x8, 0x1, 0xfffffff7, 0x0, 0x4, 0x4, 0x7, 0x100, 0x3f, 0xd25d, 0x9, 0x1f, 0x9, 0x0, 0x400, 0x80000001, 0xffffff00, 0x1ff, 0x400, 0x4, 0x6, 0x5, 0x5, 0x1, 0x4, 0x681369a5, 0x10001, 0x487408b7, 0x1, 0x6, 0x6, 0x3, 0x2, 0x9, 0x6, 0x3e2, 0x8000, 0x8001, 0x4, 0xff, 0x1, 0x1, 0x3f, 0x9e5f, 0x10001, 0xf800, 0xfff, 0x79, 0x6, 0x7fe000, 0x80, 0x6, 0x8, 0x80000000, 0x2, 0x8, 0xffff, 0x2, 0x0, 0x1, 0x1ff, 0x5, 0x31, 0x7ff, 0x7fff, 0x1, 0x401, 0x0, 0x900000, 0x9, 0x0, 0x9, 0x7f, 0x7, 0x4, 0x7, 0x19, 0x7ff, 0x6, 0x401, 0x7, 0x47b, 0x3f, 0x5, 0x3f, 0x0, 0x7, 0x4051, 0x20, 0x9, 0x59, 0x0, 0x8, 0x1800, 0x8, 0x0, 0xeaa, 0x28, 0x4, 0x4, 0x7f, 0xfff, 0x1, 0x9697, 0xffffffff, 0xfffffff7, 0x9, 0x0, 0xa60, 0x3, 0x5, 0x100, 0x2, 0x2, 0x1f, 0x40, 0x4c, 0x9, 0x0, 0x0, 0x9, 0x5205, 0x6, 0x8, 0x6c1a, 0x3, 0x7, 0x1ff, 0x5, 0xc3b, 0xfffffff8, 0x3, 0x47a2, 0x64, 0x7f, 0x1b, 0x9, 0x2, 0xdca7, 0xffffffff, 0x2, 0x5, 0xfffff801, 0x7, 0x273, 0x1000, 0xfffffffa, 0x0, 0x3, 0xfffffffd, 0x2, 0x6c7, 0x9, 0x3, 0x9, 0x7, 0x5, 0x10001, 0x8001, 0x0, 0x400, 0x4, 0xd7a, 0xd3eb, 0x100, 0x66f7, 0x0, 0x80000001, 0xe8, 0x0, 0x8, 0x7fffffff, 0x6, 0xffff, 0xffffffff, 0x7fff, 0x4463, 0xfffffffc, 0x101, 0x0, 0x9, 0xc83, 0x81, 0x8000, 0x42, 0x200, 0xffff, 0x3, 0xd4, 0x4, 0x1, 0x0, 0x4, 0x4, 0x400, 0x8, 0x2, 0x800, 0x9, 0x30a2, 0x664, 0x2, 0x3, 0x4, 0x6, 0x400, 0x3cc, 0xc5ad, 0x1, 0x8001, 0x35bc, 0x3ff, 0x20, 0x3f, 0x1, 0xfc7b, 0xea, 0x6, 0xe7d0, 0x1, 0x700000, 0x5, 0x6bc, 0x4, 0xffffff06, 0x4, 0x4, 0x4, 0x70, 0x1, 0xbac, 0xffff, 0xaf1, 0x2, 0x100, 0x5, 0x10000, 0x9, 0xffffffff, 0x7fff, 0x200, 0x987c, 0xf8a34e3, 0x5, 0x5, 0x5ca943bb, 0x6, 0x0, 0x937f, 0x4, 0x6, 0x80000000, 0x8001, 0x1, 0x4, 0x673, 0x9, 0xffff, 0x4035, 0x8001, 0x8, 0x40, 0x1000, 0x3, 0x200, 0x9, 0x46, 0x7, 0x1, 0x55e5, 0x40, 0x400, 0x1, 0x8, 0x40, 0x3, 0xfff, 0x3, 0x7, 0x9, 0x4, 0x7, 0x8000, 0x3, 0x20, 0x7, 0x200, 0x6, 0x7fff, 0x0, 0x1f, 0x5, 0x2, 0x2, 0x5, 0xc012, 0xef, 0x6, 0x16d, 0x9e5, 0x1470, 0x6, 0x1a, 0x4, 0x8, 0x1, 0x5, 0x80000001, 0x101, 0x5, 0x1f, 0x400, 0x7, 0x5, 0x80000000, 0x1, 0x0, 0x800, 0x7ff, 0xb511, 0xffff726a, 0x40, 0x815, 0xb2, 0x8000, 0x8, 0x8000, 0x9, 0x7, 0x81, 0xfffffffa, 0x6, 0x0, 0x5, 0x10001, 0x101, 0x15, 0x7f, 0x0, 0x6, 0x5, 0x2, 0x0, 0x2, 0x8001, 0x1, 0x0, 0x0, 0x4, 0x2, 0x6, 0x5, 0x7, 0x8, 0x8, 0x63, 0x40, 0xa8, 0x100000, 0x7, 0x7, 0x4, 0x800, 0x1f, 0x9, 0x5, 0x3, 0x80000000, 0x1, 0xc2, 0x1000]}) ftruncate(r1, 0xffffffffffff5f2e) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000080)=0x8) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x80000020) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) write$P9_RFLUSH(r4, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:44:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0xfffffffe, @rand_addr="34dace13781ae75f3eb4f9811422be77"}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x7, 0x80) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f00000000c0)=0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 15:44:42 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x28501, 0x12c) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f00000000c0)={0x5, 0x1, 0x9, 0x1, 0x7fff, 0x400}) 15:44:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) dup(r2) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001fff0000ea00000000000000000006f490857c513e59f8fc631966b71fea2f6b60235f8212f11652d258ee094c9d0672274b8097194273fa0c3330e09e327e9d74d2", @ANYBLOB, @ANYBLOB="00000000000000002400128009000100626f4e152e44fbfb0280516ac2b75c6e6400000000140002", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) 15:44:42 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000d041e00"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r7 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x492492492492596, 0x0) 15:44:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x145c0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xd0c, @empty}, 0x1c) 15:44:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8}]]}}}]}, 0x58}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x7, 0x5}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x20180, 0x1e1) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000100)=0x9) 15:44:43 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:43 executing program 2: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") 15:44:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/144, 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="000000000000000000000f000000080004000000000008000500000000000800060000000000", @ANYRES64], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000000000000000000001000000010000480"], 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:44:44 executing program 0: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[]}}, 0x0) 15:44:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0x14fec6936ad79562, 0x3}, 0x10) r4 = eventfd2(0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x6, 0x1, 0x4}) close(r6) ftruncate(r6, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x8, 0xfffffffe, 0x1}, &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000a000000580001c0000000000000e1"]) 15:44:44 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000380)={0x8}) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x4082004) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 643.437188][ T918] kvm [915]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0xe10000 15:44:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x24008044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 15:44:44 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd94, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010010000fdffff7f7700000000000000f367b9f33f56ddc94dbf7be8852e23c62824d9e95810042e20180dff98e4e88e179fb4bb08a99324dd194b96b6f2842f86e8a6acd6da76d9279336bf560696b4266e3f652c2f539f1ca3f242980d6851cdafd85cf0b24cd12c1d5abdb00f5c32e6cf2aa49fc2687785869358f9800e0abdf1e2c41135902a2f"], 0x18}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) r5 = semget(0x2, 0x4, 0x0) semctl$SETVAL(r5, 0x1, 0x10, &(0x7f0000000040)=0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000080)='comm\x00') setpriority(0x0, 0x0, 0x7) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) 15:44:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[]}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3aec}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x515242, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="8100000000000000000000000000000000000000000300"/133]) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x9, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) r2 = dup(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000140), &(0x7f0000000300)=""/242}, 0x78) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x0, 0x2, 0x0, 0x0}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) write$binfmt_elf32(r4, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfa, 0x1, 0x81, 0x3, 0x9, 0x3, 0x3e, 0x95, 0x3d, 0x38, 0x28a, 0x1, 0x6, 0x20, 0x1, 0x6, 0xff81, 0x3f}, [{0x6474e551, 0x7f, 0x100, 0xd84, 0x2, 0x2e, 0x5bd, 0x92}, {0x1, 0x1004, 0x3ff, 0x1, 0x5, 0x3f, 0x1f, 0x6}], "f138c1df6aad64af841db72dab790fb9b3b7af4cb744b738559fa253715bac7c57f93f770b0f875da9c2a5f8b279dee15be1616677d7e2697bb8878280cf4f432984def950604be495f2307a310bdc36cf5316b707bf29b02c277fa2471d0be149bdac", [[], [], [], [], []]}, 0x5db) dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) dup(r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) dup(0xffffffffffffffff) sendmsg$nl_route(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x282100, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffd8d, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80800, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000080)={0x10, 0x0, 0x5}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 643.823224][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 643.899333][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 643.955001][ T533] tipc: TX() has been purged, node left! [ 644.034951][ T938] IPVS: ftp: loaded support on port[0] = 21 15:44:45 executing program 1: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYBLOB="2b0e0000000100000000000000051fe303b5b65e8b42569b207792a5965f245f2be0ef44eb229bef88"], 0x3}, 0x1, 0x0, 0x0, 0x4040445}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:44:45 executing program 5: r0 = epoll_create1(0x0) socket$isdn(0x22, 0x3, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x403) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x12100, 0x0) r5 = dup3(r2, r4, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x6, 0x101, 0x8, 0x882}, 'syz1\x00', 0x45}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r6 = epoll_create1(0x0) socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) ftruncate(r8, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='f\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012cbd7000fedbdf2510000000300001800600c049fb6941b192c3020010c20000140003000041060004004e20001008000b00bc2a9f9807ad7d2a000000000c000180060001000a0000007f00018008000b007369700066352f93cf79879239d5bea8377a4d6488f3180c88ca903f31bbe46ef5c3007699996043aef21fb62ec00d34e90d4cc03d8b2be4b925b54c9b16ba36ea79f50b14389bac0c90b2bd06bc23fdd66fc27ea95489c39b5b000b1c744de7d93dc63099554ab50b9f104773d7451f5c49800f9c"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ftruncate(r7, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r10 = socket$bt_cmtp(0x1f, 0x3, 0x5) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x4400, 0x0) ioctl$sock_SIOCDELDLCI(r11, 0x8981, &(0x7f0000000180)={'bridge_slave_0\x00', 0x1000}) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) ftruncate(r12, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000400)='veth0\x00', 0x10) socket$pppoe(0x18, 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:45 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x1a3202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80000001) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x6}, {0x2, 0x1, r9}, {0x2, 0x3}], {}, [], {0x10, 0x4}, {0x20, 0x5}}, 0x3c, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) ftruncate(r11, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000440)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) getresuid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() setfsgid(r15) r16 = getegid() r17 = getegid() setfsgid(r17) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r18) ftruncate(r18, 0x0) statx(r18, &(0x7f0000000700)='./file0\x00', 0x400, 0x100, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r6, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {}, [{0x2, 0x6, r7}, {0x2, 0x1, r8}, {0x2, 0xd, r9}, {0x2, 0x5, r10}, {0x2, 0x4, r12}, {0x2, 0x0, r13}], {0x4, 0x2}, [{0x8, 0x4, r14}, {0x8, 0x1, r15}, {0x8, 0x0, r16}, {0x8, 0x7, r17}, {0x8, 0x1, r19}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x3) dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r20}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r20, 0x2, 0x100}, &(0x7f0000000040)=0x8) 15:44:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) r3 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000002, 0x40010, r3, 0xeaa0e000) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0x8, 0xc9b5, [0x9, 0xafcc, 0xfff, 0x0, 0x1], 0x2}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 644.812434][ T533] tipc: TX() has been purged, node left! [ 644.969046][ T1048] IPVS: ftp: loaded support on port[0] = 21 [ 645.092046][ T533] tipc: TX() has been purged, node left! 15:44:46 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x80000002}) 15:44:46 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', &(0x7f0000000240)='posix_acl_access]J\x00', 0x13, 0x1) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000600), 0x12) r4 = openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x40000) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000080)='comm\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r6, r3, 0x0, 0xd, &(0x7f0000000100)='cgroup.p\xdfocs\x00', 0xffffffffffffffff}, 0x30) sched_setscheduler(r7, 0x1, &(0x7f0000000180)=0x3) 15:44:46 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) getpeername(r0, &(0x7f0000001400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000015c0)=0x80) sendmmsg(r0, &(0x7f00000064c0)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed={[], 0x7f}, 0xda}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="14df5ed970c80ac68eedd8c4040d58bae49cbf3bc3ece3", 0x17}, {&(0x7f0000000240)="229156934f849a1e193af5b577b61375e3104d5a75195428f5628e5606b337552801cb788e680c12c6863a18b7a01552757eae529edc6e5e73cc98e1fe1d177464b27df04d577f103be720c58170ecfba4707f8afae952a83de344d27a1d14fe2a5a7d16163deec405be000eeea67951ead05e0faa92ac928f3830aef1a49b322978659edd977ac4520a8df54c1d7694bd67e381910d58c715c9a03dff34848393ff7bd28c6a7f5d5067355c41038a2cb0873cb08ed25990e551de584e0d2e7a7401dd00505e9de67b200e328cb58b612658a5dae9ef79088b", 0xd9}, {&(0x7f0000000140)="6078880d50af7bba63ea5c8df083bde96c6c809d53dc1cd39d51b2a94db16d531fc187ddd0612c063add7e45aa1022a9e5b695615a3828", 0x37}, {&(0x7f0000000340)="c74a9256edd0b6c30d02c58b2de019bc839ea5bd2dcf7717be2581d044473f28284a3313deb03d3279321a3fb6f2f2857cafc81ca99520e1bf966f2eaa52c8a78e2a00a9fe23346f51f3144ec3e68debc55ce9674a224703c0c1d1904f989f31bd54dd387113eb71f3301da435f75ca792268423d0054de0b23e722b6c2d1e3a9a41ec056177f342e51959fb089755116b1de47102736f1bbdb992f6f1b3936cd42cc200ec53146fae043c693bf35fda8a9d471da67dfba27e8927f159d740c769ad6ed9c9d1d78568053f08b4863c4f6750ebf5ff8abfe3f8585c94d800995c3bbdd8d418b019e69e8b798aac6fe9545972d2fede95d3c108a4e9b2aaeab27a9e0eaa2ad84869b4fb5231df0ce894ab6f538b379e3fdc91eb656c058ec6cde0ab4e18941eb3e3aa7aa31351d6de5e53088623a4dbe976cc2051f71f4c0fadd6223beb8b088cd045bae127c5c2fad762c6a765f55f75d947e5350362a83900e114bbbe78bd51d57e59e8c29c08de01ac4383da175129b400c368aecbf6d4d3cb0505f31d05ce23655416f0ef1bb9849d4ad6290dcae2e7e03d8989d9860281a8baa80029437d90841ae813100d08f08231daeac20edaf98ec199d49b78e5850b6d19d678cb982297d4a7028d8f366ebb8bbcb8fbce16ee4e19266d2289459494177c1a8c32febf43678c58d866656a18ba8c240e315ab3a3134f12b53a3a4242e53ec3b0572da2013c7da6c6b3fa4850611a2fb85c65fef51522aad6b9f6d80db4fbd75d6efeb8649e3c14e7bff1b0296d9bd1d57e8a206347ce7f3024742f11fc553891f8faaafeaaf1b3242586ec2b1bcc4b0d35ee4366a7151a4fd1c9529fac59fe52c61539e74aaac03142c1f6847fb979eb47356994a4dab807e3480629f67797b9c88f5b2d33dea765bee959507ace219cb326afe2fbc3459b42e36112c84b7f2730ff5239d352d74dc013ee4704a4104b4b8b805045eb7863a8ad39aed60e135cd6f94cecbede3d0993d58c1832f23da67d1978d4d547d26ebaae7008fc78c11973c259d467732275badf56ffb1fced1dffa21a7dfdf983498cfad13e447c8c116146c962a850b84da99915cce02c5b6a2e52cf218b636eff9df4c2b1fecff3f98934ea67fa542a5e5cf5453f5e9ff1d6e82ee2b0bdfbd0ede7584dece74670ea859771beefc0582b9f0ec98883cf541626cbbcb3a394a35d0ed8018b3ac6f724569fa23fb8d8f526386674c2f238909c92a2a6244db6af4ef70fa2a1d2984e979e2bdfe337b82c8fe5429b0faf1a1b72a23f5c7c7f2afdf4746bc07c8b65592a29836b6ac423890795194628ba2d41de9d0a47376fd7b47f87c0f40202c21ccd9c200ad93908878141a9597c32b02664858bfa10556da934de67a0911e260f4374a07ecdebc536ee283e4bbbde26868cfc5aa3965df14ca8783c8711a8b225319a8f273465110a90517d7c02182f3f9beb5ad48afb7ceb31322fa582e6b6a4270250e9a4c88ef0fe350caf4e6eb6cac2107882048e6777b4a3f08a5dbc792c24d4a772493d15d33753527108780c55a145393b840d01769266e251aec6477fab44c8cdf830495a5758562963a56a7e548a5594b86162aeae1c117328bec995ff9b4a074560619d6f40a839103da46dcc21be8e27b1b7e8510414549864e8ab136d4d3d076d324e237b6196dc49d7738f186de91380de735ad1e8b8f281b98007f3d6f291e12f08f7417d4474bb7cae640306b4afb4f20f6ac948d350f3c969eef3e1b82deefdd3671e38b71b5f40c3c36924837a91316078d2895114065e4db68b4e9477e9353f0dbc66838bb5b9fd70bd1be06d1fde74b33d8b2b53112b8c15953747936939867e06bf47d775235d22407b25beeb9bfcaaaca614acc62fd03e85694cea77b0dc3293faf03b59aa962bc7ef246f43c05f5f322590b584051db6e70f9be3d4c64f202b7bae31db22b1adfe13e9595c9f48f84b1b0828329963088975bd8e0c8cc10aa46251d2c8af9f7d2d7dfbc440314f85c88d942057ad8ff363937d7ee709e2885fce9dd867b9ffd1df2a00e09b11905cfc7decd1a240fcca2fbbaca2eb7505acc045abab2a125613aa9afb3f47917e0006e31f170d09134c8fe3e9ec67e182f4ad6557826a0f3c0b2d505d3858ecf248d2deb44281b96aed47d58f479e1a38f69218b20c42473cebc1d286034e9db5c6cdb169864ed1869a91c7f51a75a65fb55d96075d03379012a08f479d00126e64e5a75165fe8566d2c3bf481184218924e8f861f3d24cbccd982800aadcc459556e1b0b99ee7edc30bbee238a804d50b1dcae28a9e5c3a00811bb9a9760c0f8824fd1fe94e88049b4fee8b7b2e74c9d7e04fb6976defd5c74810b794cf6844065fb2ebf0d4cf5d374259fc638da1469a2d839950d2dac4fd52c9f178b805e9c496ab07d641fe664439aad22312af669e8b326e0923b21948720c3730e04992421bd346e6974c012f15eb1e05ca1e501bea83ff45cbc7ad5350b1e0a9ba35032860901fdbc6a1523a9596b57cb6aa6106ea969bafd1af549835a31e80f26117509de4b0b34c5c24e30c2b46468335794f64412262502fc368aa04677aa0c851129fe30e6fb266d2684f359bd369ad37a8c9c9cc2b1a6c248d0f74639d942e49a5bae3a0c67512003471b2d9fe9df1cd115bcf2a7c052ebef994c9c5c4268f5018e3c080239d571d93540594f03d0e63fff4296a973b846a28a2f24a7a34ee4f6492419a730a6af3be1ddcef6f0fcd3b7d460eb6a19b8e2219a634a0f09f839749bc868ef1a134a6336e4c783ec52cf7ec8c419e25887d194635684067ed072eeb403bb4e132c9f2a1efcdd52809bc6a4c8840e073719143d3f6e5976218df16bc94c3d604b0a4b6d39c8889df2a586d99255a6da647569e702d35a4cf2ddfb030ceb953a5d3e17bf783f07d3d3852bbe354f89f735461bd6f8cbbdf4abf9b2589bda6329332f1549c66d8a32df8b8e79bf8f55b3510b627854d4519115228d1c4d6b50df446b10af8fa5868ed8f37adb2d7460464eaf8e0bc51aa230ee8794e29ec62578f592d986816141b6d1e9c8aa5e2544650571658379c587f64f163f4b24a693fca7f81e18664978352bc5d709df41860d7a7d627cd40add78d3b5562825f06b8458989413dc8987d4905749ea514af012d4deb35375f27e5fe3ad4a52cd99c2adcbd9d085934b0e37eecb6df1f3b06d322c108813ab2975294805dc2c9ff7441c532dec8963df35925035f7934302e24b8df759209ad8df141d5041cf4343d20bf94bdaad81aff68b76e846e3b732cc28757ed29edf3cb316d86da94d7b6abef36cf6580d34aaac199590fa7100dbcec0e5ad044b54e57726d52fbe1583c18c111e672e0cd2bf2c1dfcbc32fbc5b7254efa39b4940ac08e96b4e96884b9797f940b11fdbfcd7a7e0a64461b8b27b0ec4a7af2c96327c7d8ebc256faf2a98f0c408c7297e977d382bd912390cbe7c16944a26941ef10ad835277106033b7194eed5f9a81aa9801aac658ef866ce417972cd644872d5f79e5c93d8558d726594c2ae746b7e993ce41812fcaec499564423666117c5bb5b7f2b185d3c2b7150d589dd9dc4c6af07a2066261bbcb18c8b615dd4364e87edadef3f8b89aa925cacf1fd5ed75b9005625bcc66edcf09935d252b92cbdf3d0306b6755ce9d7fbe77380df5415a9f09bbd8f33b29e1172d18a72f60c8134987c8e20cda787fcc4bd3e3b1aca311b3e13dd8269cb5b08516a2a9bf087884e30e02c0b1efaf7c03fe65bf2838c12f82dd41293621cdfa89ed44370b5db27e8f68a8a6e2a04169eb7658bda1f79903b8fd1b2f9b77651d0b981fe425d4befebebbec96498e01e3fde3738a1adb0b319d094973b5b46f2eb8da817609d9deda546c43a32994dedd2253309908dbfb0ca088fa030b7b20530b7fd6bbf529b4cca31af1bc491986f1511f02861e92e852ae2a52eed1d765ddca2f89b1ad21a3b582174cef2f31b7d44e1a1f80fb9f569492b1174827f97d574fbdd4cbec6db122bd08283c13f79b03f9da3560bf10463517289123da540cadacbab55a5adf0dd28541a10e6d7388ecab16915a6c624f90a9778b12071039e1b3fc6a089c9122452b517f3f19fba0d2b4c943c35953b6235d0e0d7b7820740db7771b28368015fb0d86a87296bcfc62c23099336dcab33341ca036a404bbff879f92344bc0cd7edc907548d8cfe73566547a0d1061c479fbbdabeae66155121905955c869ce764482390232ef045af77a40727ac6bae9aac73c1434597df6978f9d61f540b7f8813f2d0678bf20eadf8d94609ab4bc43336410431d956b5283bfcd35a6d04536f743a8f2980652dd69194bb4789796c9ce5f1221f954be3a2e928f93824e6fd7d97a9a4f73ebf05efad9a542976a50c93fbbe9ec405f10966fad402e58c710280be062a7bc3c3790281f0d903f27f8a3c4719ce3b770df3f43f563cca737bfc7281f84467f1acfbad3177ebb89ee7a16db4571873bf588c8917bfa9ba67c7601ba038d6974c146cdf3bc3eaf292d77daa504b95f9bbdb0ae138feae7c8a425ddfccb0aac1044c8bb7c345ddce4f16f1e9bdef6df7b2a42bf086d07e16fe97e913aadce9b608e1581552006087e013aee0921c3524854ad0ed4d4ce878dc8793969137fe2f6d49ad7e20de85b13fcd9cba18e4a4c91f0244df6779d88966f63ab01ef40b69cab974f407723574081db86c4009d1ca84c657196439ac1ce4266712e2aa2b55b8e238b5c81c3289c5e497c7862649d4aef1c536a7aa05137b12f2d7c4aad963559d601e77eafd63cebbf62d62643417993a2055a47a8cf4d50dbae25dbce7c12f938a37d6e04e4c8468e4459d926cc7e688816fa80ec3a97e79f9cc3d37dbd9b23908cc26ba15b4ab6c2bb18e294a143d8dde46aae71890a082b5a5ff6b5c7cd0f369d492a2145442ae3b68774462cb3307eaa6f68ae66697613a439fd4e25f976db1563d1b0db3ab3afa1ee38bb3a1391021348dc4b3e3efe1725fb8fca35e905510fd1157e01e5588bbc7b3316ea2332849351db313d0710d4c784a8d2d7c990738aa33e287e8ea2b6f366ec9def1ca1fcc8ef99dcfbb11ef82008fd12cffbbca75cfbe6c60588792c11485a4ed71ec974cb1af9f3c8694456daaba568ed5c7bd9ebd10eeb3b15f40452918c9dcb3b90ac69b1b4a456b68222b6a67f18db47cc710b1e960c1156d42a9a0d480db7c0d1236735fd019733381e67bee4289aa87ec782e0afd383a4f8b0cf58bdcfbe0cabc9f03a1289fa226aeece9b8b8a50ed7b690603684ea0b0f2abffdbecea6d48ac4e8a82bcf6c87d03e21bc60bbab53782eb41b1de243844e39ceef9bb748a2b724f6c915e7d5747b0b559a57ba2300b6a5ef5df778b645bb6d8cc3aa4ef65e399a3649fbc0d36a60b36787775df372eebfdf0c7bfb8162e762f70967b885e021c4f7be7bb1f88580d33e1a135880e7d223351e8e5a25afcfbfcf151dc5f5b24a8bb8c31ba6e43de01b29524b84d35bba9a166d9034507c5430ff858f5e20aed80c9c0637e8781aa79af1641e2432a66d2effce0d50bf4d88208e6b7339bc127bd4e075ea967ca53cd5548c4b00d5935f46c7fe90915adf58ca496ca23817389b4c221fd81011b44c4262d19f6540517e2ada17ee9f8c6e5e1cdb4f4eecd03e48f70c35dbc278c018ca0d1db9a690d56714fbbf897a1cf0f0b583be4fcd8392dbf99e5d2ae18cc1fe47060c267690fadcc0f11d832b9b81e0a6bd", 0x1000}, {&(0x7f0000001340)="ce608d95eb9a440f0857c870128c2e07cbc752a36ec9eb0f1515199c1bdeccda292679d966d697616219c322a696de4a181d4dd31a35d98865a4c07bf221a5c6fabaf8f457c2e2423d1591411e8812c12485075b88ca1afcc439c59be2dc84b927078304cf3420a404c18aa0a84a13bddbb9b510b6d0e8bed1634517d15f2efc16fdc639bcf96bdc0cd03c0b211e3ca03977dcf0a39ee14bee0438fee9da303871c2", 0xa2}, {&(0x7f00000014c0)="769dcc18ee24c57503c2300edff53a0a320e8cc170f4916b7b9a7c18f95c45c5f661330af49089864340dba14c0559a9f6959cd8e602c26be29d95239de89d885b8fa3ed4f72d6307201d9780a7e5428a95a621bdb4d0a3d91e822575bb77bc3924623cdc22fcd90759c69b0a6171df5221e2e1a1882886dd15ad5db558b3b4b9a995897e5533a597c9a772da1552ef583b8dae6b0529211414d26eccf41449c2f1caffde1b0161549dcc8c6b05fe7514f3b9988f9821d04c9d708205d1f3da4838aee6625ec2d235a3a782b16c763104a2fa206ec2481aa1002999dfc7dadcf3281e14452368331e4b8aee4e921fc584b54908bdb900c20", 0xf8}], 0x6, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1238}}, {{&(0x7f0000001600)=@ll={0x11, 0x1a, r1, 0x1, 0x6, 0x6, @dev={[], 0x2f}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001680)="670bc5edf4bd9e5052cf9d7279616fd400d69769b07d2fd52d3fd4076dd37a07d4d2e0f2f1b7514c0b6e4b5d4950e38ac5b8d53aae2da660a36da49c83bbec5afdc03fea7c99b0a40fcffb43ab59432e8dd21096b232614ad3529dfce80fa83b24f3d2da4171b51b1287c84d34c4e9e7c45bd4e7c74c9cdcef9b1cc9f576ed48485227d9cee782a2ea68157946966c83ef903ffbe3dd0f9efabe9f37fb7bbda11d95631abf7fa5157d3317fd3d17263dbe8be4187f6340113f489dddcba9c6b92c8a1d6c29a37c760003f6a00eeb557fcef0527b281a07e94340b5800fd2de367a3894ac", 0xe4}, {&(0x7f0000002f00)="6b9525091a44d08313fb5b4554e43610a0fc9d98b0ce96276479c84b279d426946e7a37d19c273a81fe0d73e1683276fa681551669dda3edab3f98ca554c6eec66311be6de6bcf4859c77818b61627bea57d44967c11a08db63700df64a06c655f7694e63fab6d648eca245ce7240e7df2446175ae402636ef9282918be7567dbad0a346a71a11edac7764d8db08c5bccfade967c60425c4de10fdbc96e6b9e85c8f86ae73b9064b39bf2de86d0e147cf21fc57005fdc398ae24116d991b6e12ead2ff3b56b02967c30b09e8ed1e729cdfc2eea161b628a0b4c17097726847a16ac102dd8b123bcd863bc0aff977f78ff11c1d25f647cfa5b8a9688b8e856f9ad37828cd9131d23f5df1f31c71dbe3ee9ca5be3ae4fe270858c2b500adf72feb99b50f4028ee98b6462c2cc544097ab904fc7bd83282a9c0117b9cd6b125a7ee68c538ea1b8011a1de00cca7eb1c497bbdaca139fd1923c272037b46f6556dd7778b8e890bf8237e41d087746af074e9f7f9b237994aa951cb9a901251a4c25ecfc2e2d3ef10b0fa37c62aeb4208172babfaa4abb37b9419c17e5857ca925911c83df947b117e7af8a96e5376bc38c1a8cc93423322ea56049faff176407bfb88bc11a081c5e40f1268034a820cb7cb9e53c6ffb236559648bb7dde4295fd48dae668a3bd526a00f641095585fbe04239106decbd301ff8416d862997de1f999795a31976c8cb4539548e8636e6c950d95921760c90cee745df3550edbf180f86bcfbdbc77fc2464c7e3a7cd7f1137402ae252ed0cd1b452e3d04999eee885f0b908f21be61ed8298f01ce17ffcb2c9032a87bb8f9ed5e471b169479ffbb58b410e3b5bc7ecd9c36becd49cf2b2c660dd314233e57a21f88f7091caf12ad5abbd09b76cbfa0cf3c831a3d9a696791368df24d84bb192fe5b3acf907f38b0f47e5dc7e0821683c4eee03a960e6df150ff8f0cd3755951a49ee78a7649d7d828ec9021af74ce9f93342b6e57e63b7284b2fded37c94943953083a912bf907749378989821716355305dcf08fb9ecef1ba33b98cd5040faeb7e2061cd2c3e18a760b317b55184d94d394343c1d0a8915decb83fcb36952f256277a6b6827fdd7e7fdf94cd6d10f273b27f67db432d4e8d5fba59701f73a09cd926377b1936c6b3a2022dbfdd00479f3a8da37f4310e577770dd72de963b6c391d2f78c5c9d6e66ff085b750ceacc2dbc390f320554e2a9f45acf1e9abba5d6f4f973cef6c65a18ffc2e3554c2cf05865b424cf60b88c665eb74c73a94da3cd0544ce7a8acc3d687b2e180ef4cbc234dc5b06777c9c812bb22aff00de9c394636f25c818d64dbc8c78a1d95df6e7cd0e56f6effe03a4cc220e5425849bf78f15fcfbb81a98afed15374dfc127daf93dccf6ad9454c8a7a2f4312e343692ab4f15833447594b4601e3e035df7e6827aa7514059938f0cb32342ae83be7802a3a9634435a26d7674ae9aed348e795d5204ce3ac4fd74efb9664bb4f90f1d36a57ff695d4b04a201db3bc54595464513af00e9bb8fdad73aea44a8e0f893de00ccb513f03dfc240a7ff1d13e6f9a75170958dabb5bfbc9327cfb9220bb3f19d8408aaf8f1d0ef6d4db14c4188c9696df0a9dd8a0414d08fe9b42e115d0611de1423c36febdbe493e7d2066aa6759c726cc5c0613e57956f8ce9a23a9d008e12a0a4ff3ef7f7637f4363c95e0bb7eab387004043b2cacbacae89cdcad5ced818e05c7ef8b1e118e940793bc5c0d5255b3402203a86217229e67b1774d2b72bad855779c872dcd05bc2600bb11b14bba57992f4f1a43b44b9c4590f0b4ab38d00cc691008a4f701019b7c355da5c0987145e65058b2996995b1a47d7e69d912a2b06a4f5f66cdf4e973320ed3e66a626266f33eff91637f4bda417d49396d5413191d062b6e8cef37f9b9d5c5d327d6c2c3a10f9d5c0e58e81f737309c7504c99b7a81ff903ddad947b15c905f8ecc318c8bc0f18bd24a5c8333966e3537ff3632b930d553b97714bba09d6fa1f2d0a9bd1cd0dfb541cea3c0b58af79493cb108bb79f53936f83e8bdf8d7f699b6bad40ee6435f25f5d459e0e9910cb37b7624822d6977d232f207d2caab7f31f989ded9f4baebbeecd69ef5f2bfdf2f055bf622b885f17d332e558a1995c98642f734eeb5b17e1403c94e306f51ffbcf04d85008e8b8cd1a7a88f1364cfae869319b5a0f23500ff6b89bdd2399d05ae231b8179732e218634b4946bae8e27980e778b68f7fd528a4a3487f18b644e2175f951753bf3683653627ef5a1854db311fefdeba6a6d6fcefd89926b3c5859745b3a8a7c36e5353fb984dd86ba50a78840ad9eae75d2e4e688bd66fab6dab20506136898cf51e3d8f754b38bff9db037b7d13e633a3ec652e91b1ff00497e6834d1d1757330c01db266d923b187c9662e09e219e3915aaf8f39b564b88af7b1d8cf93159996d37c33eba834f5ada9984a11562e200509b8203af1a214acc04f92176a20152ab9a97c35151b15596a4789cd81c37ebf98d7f78a2723243d3f9a8e23213e3ea8a1fe8a3bbe856c0431bb3b9c85f50492c7b87d627278af407d0b7314a7ba67e2c11e11fa1dc465f5f9130178cfc29c76d6849e5652fb1c26dc520bc850e1e094847f574ff1adf14776ff6d2f51eba58b0dabeb9effc3869139f8ece20bc37da631256cfff251e908a0e2a1cdc7070cc8fa7dea95f3671f428ba70aaf35e08edc539a2eb723099099ab12c77788a6bc7bef34748432f050938c71d9bcaea5b6965ad43322104c9c5da7b0e6a1fd0b856c05810240e7d05ae2233e6af8a45c9be3229889688067c148ea857e0a5c1fd68a21a5c6906fdcca63e2e19880440f5ef659c22f35f6913f844eb2203bd587f0f5dffb7720f6cba60ceefe1299583962d252085adf4720fa1bd6f655633208829dce96d2e31ca81779b8ad325f1eb35e7c65f9ab84343d232f71769451ee9c7553a1adf5afef10844525ff6ef79a87488df309b2f3e16c91e6ac1f4940b705925fa88849a68060fef103664df230df77325cb5537ab164933517cc12a182fef97ea69dae2ad22ceeeeb6c3fe23463a352e4e2e317f00a1f647db991f95182ddde1669ecfb5a8ae6edfbb210b19edc49925b24297f379d4769d479e70d6a8554c8c9249adcd48c31222f5ec648e48c079d8c0011950185376655aa84844e28bbaca328a2460d82cd46c693be7b493e815f4c7b11b12c82fd5a6675e5eab6678b24a5b8853e134f7dbbeed8383f2b048b7b11391615144a8526f731d07f4b33ccabd81e241104400abf2ccafc5e978cb9e561a02827b181156c01102bf888d3fb9683585339c2749eae47f048eff7204c62efd1de30bca046aee8caeccf0bb1946e064ea94da1706a9d0813a426b7ff6ae345d33c4082bed6530ac3e02d3e735713eeada17c6f361a410408be1ba5ceae0ba9db797ccee3822e702b73ccde6e2b10bb2ec85837a1cc8d399e6626f77f8c26260bdeec0629af5e5de28505c049350a7d09de096b7ff65af9633807b9a25fb7db1ff499f1e31ccb20497ba2b9555887355aa960cb73895020d64577e2471680e646041476a68c5807f31b26f5b506304293c354d0318c36218401a0d511d0e0c1f8faa642ed154826ed32481fd36b5bd3215d248219f8a76addd16ac514e1fed550b4ac277054995774aba22094f56bffbe192f258e37538a2a9830398ec35132a65ba2a2e67cd38979f3f638663f9a629743ed9d6711159ec9e4824291eeb99e9becadbfa122180c7d69d757301947ccb3016e0b042661edddf9e218646b1d637965f4c0417911687d5ddcf56d23d8168926686dd737d47e670afd7542e6fa51565e066f00c0374f2e3261a7509586aeba9636e21618bf94b2c1a813c7cc5ac5c241892fa4a357d7ca8d5037a93a4a11a60291ccb0c20837603ba0066ca83d7a2872996aeae7f709b2dfa6fac0252cead3415eaf5d94780a18a4aa034f4751646c02fae2179b60a018817c2629da9a056cc5cf22740f34a6ed2616d41760f75be4c66eb9b9704e41ef622f9370c185178796b22ee4c72b2d05fff4d0a1e431d7116f35b212e89dd960155e97c4b37919b7e46ef210925babb1b92f0ac3d140c378ac5828129e08477f493fb60f4db6c7b2bce0edba504ed2f8dc016401257ae7e4dac2ff1060377219c672c613faee75c6b338695eefb101b16d44fd31c003a9f4b9d318b47610af6b3616af09a0fd490a93ff76d99dd84ae354fa510233eb69dafb18f5b869138374eff02b6adbab08673ea0bf39f5b75085d6232ed5a4e4159b12d1854edf4223bb2d0a1e317d636c3280ba4b376811957fe9c71686e65b38c9bf47884ebbe26a9f2e74f33849b46b32757e7ae87294c3e8104b1e85e1a5b9f9f6c7a24f4f3f8e129fef7c2caea642054591e23319912497675476a9f1a7db1bac0d68bb4ccf1e483cf5b9e6e236c5aa664f774e490a21eb10ea7068a57562045e275c0768c948ee09c8f2661fb47220ad3e7210ca08e628da0e44a80e23077c5ed4613243b7b38e9afc96597d2538f113f0412673fa521a4a000189752d94c179561ee632693b05b7a5ab3cdc22aafdd2574a29ca04ea83ed78b88db34f9935a853a098e19a45b4caac3a7a5a009e6b48f62d2c1a56e17d67085486784f146e6c0ee2284b6e34ae62cb9042bdbb7d3c0380a8bd235db93ea8925cf53bceb9ba48ffbb1b6eb74fd7e18127bc0d9505def0915d910e50a52c37323cbf930f86accb95231e304a5f414847e458c0035bcc9bb3786447769fb9c2a64c146a18dec4aeb08cca3a2354043e52149bd6ec7b1c7a4b6afd2356e7c2f23035014846a2c8a5586702aef912b35737144b02bae237c370ab6b4c1fb67f04dde0635d7b99489f56f7f26f0bf858586d8f163d15aaae3e8dc9285d70bdb3837b9e8a8b4436a836c61329b44d6a6778e1c4b4f28ee589206b76b131ee2ae424b2698c8dafab47560a79e832117423b3a38806448af24616860e00d7b49311b62ebd5ff541f5793e38168d539c60a7f02d2c5f74ee15c796c55dd1e95d1f91f3600d605657a0371f1c351eddc2b8ef55579bfdf274c95db9bfc948e3b99a94c242936b97677ff0f7f659c6a481d5951c629d186a9b76c55d7adf28d590d03574671d993cd59e7e9e110257b67b31bcb3d0d7c987d65b5f7ef9f7e4ebdfa34dcb54d8fae71fa63a63f29a26df9de61637f5687ec5b38918371030e9a762d1330e75bcf5f0ccb4d8ff65cffa9aca22466e710a8f19af70eeda719a118393a35faccf1770ce183146ab973905f76bb8faa93d6280b150fe9cf7be046c33e6387b51e95a7a3a549333a08c72ef8a8acc24bd17288930ffd04885c82b33e1184a5e22084b86295c07511a87c851b89b433e0e4c882a853e3309697f6e8a77b5b6bab7f1a6918d19bf8f2db5bb803b1452c737ae9cd982f155828e69460f23b846a6681de55f4d8baa71a16a58aae3396e65410ccced6c35d2c8f71512642d95ff3c9d70f915677f09e2c43fa31a870a4f430104b9cb54ba1191ff46de35a56fa9ea5f00d603983180945f2a0566ac2ba784def300d69ffceea6cbc183987774ba2d4874b4fb8e4c5044ad6a3e7123f6b4197af2ce7cf94c89409c77da17613a73e4ecaa9564a7e8742faf574bc434e797d1b1b16afe6d4924bb9216846c5cef2ebb2ade4ebac75419a3f56eb0a35546998fa266245d251c9c56b45be7beff30f9c0f29d7a85f4da486faf7dba9a4fe96", 0x1000}, {&(0x7f0000001780)="11e78abd3fa45ded3a025c2664ed6a9acc7137ebbe679cf8ca922d7d21d2fac7cb6a9206292effaa476ed7e56087789a12b1a793e48bb9d08417820a7ec0a49e01439ea3fc1c0f7af6b306f864b1483fe6cb22f61af00f10d9276009e4dff59b9c06e038d46a0b812119c67a6ac32a30e65102304e120be3465abf86e5f0f41fb0ec888618f4a541872f91036c079d7625ea84e0ffdd69d1598382a4d09d68fe59d1f970501adcf7c830402043c2880988c0b5287cb2761aedf9", 0xba}, {&(0x7f0000001840)="737c5b4741d4af347e319974c27a3d82563368abc520e137398be2c3d63fa42f566a0935d046e506c50b4264858162", 0x2f}], 0x4, &(0x7f00000018c0)=[{0x38, 0x117, 0x32, "9217758420d2c843575c912d1398f4e3de3390d61d321dc90ed1aa5dd17e9a7818b60f8141c2d886"}], 0x38}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000001900)="8dd09105d7f18f6e6e10db396436c7d93f1783a8ab59eb22a6c1a4986ce83c84c32907b061e0295764d85f180ec48cff113dbb2b459611c18e1f0626b187", 0x3e}, {&(0x7f0000001940)="a2bb748f5e1005b5d77b31c745663a24cb0ca7de3d14fe7f81188876f89f44399644f14b71d275a4c5432d320a4acc366227e9c0176945fcade10c8e4ebbf89b5ce2979a74778fb049e90e7d5ed72970a0e41473d3d4a63d0b56429ba6e3fd484f03c8d46489bc80c5ecb87971d1efde8535b6cf45637614c4eecba3f5a31c4a4e", 0x81}, {&(0x7f0000001a00)="deb558", 0x3}, {&(0x7f0000001a40)="ea519bae2a77c5eca40048ac", 0xc}, {&(0x7f0000001a80)="1a33a9203a68bb7acfd166402d771c47ca995687a1d0dc425c5c4faceccc19f15b598acbc61843686b0368bc652c6f4dc7e014e4ce8773e23929fffd54d541c0d9a0a5a9f443c8322620b8d5309482f4652b9264c4e5", 0x56}, {&(0x7f0000001b00)="10db1cf111e121170376fcff8e5c38a2a896df6282f97add6ec3a9529827ffc48e6f56297a97bb01a931728dd4110a2b93207850c6a61365a342477db6c743140495e972161448c15f3dad00fed22ec7d932fffd3568f2c7d11c9f28e258a540c18d36117e70e81e5319ff80f0f0eb0ba83fa4ba25a96d59684d7fec3dbcce35f3bcf415764507dee15ebaf80180e2f13c53466b4efbf4c3cc35754e279eef1f29ae023886525f0527c64863df6b9709af2d0ad06cf2eed2cda9c30d3371e6", 0xbf}, {&(0x7f0000001bc0)="c2886f4bcc7b49cbeffb644a1ac5b38fb858b2ecfa2994e46d8f9d58e797c26e71f2357354548dec57485409d64ad2a955f31627df5f325c6dee5b6b5b4a9ca5d8a8f9d7da50f759a5fdb8c807", 0x4d}, {&(0x7f0000003f00)="f94f0fdaf0f3c161487a9a0775eeb12ad7a23a08404f6b5140e8df68b8049b7ffec5988a72f565dff84bcceb95b3d7ec0b9bf7874babd28b7ecb40dfcef376e5be40d7ee7361d024c9ad123b8d590c6f44c18c546f1978592299aa84131acf209d3cc656eb1ae5997f39a4bcfc93e9e553a23aa7c2f6d061ecc425d401bf80648f69b93b883410eba8862e63a8ccb154bc8b67fbdc01521af16eea838087ba9e2691e8d03b6e82869e71d4804fac7c8201b00e7748306e738cc0558374ae7ea7d67e09343885f4ba9cdedae97fd095f9f32f6c76dbc5cd8a8889daebe32d9ba023cae0ea803ea5", 0xe7}, {&(0x7f0000004000)="bf19f57a4a1a5593b86c4212095296d5aad63b2cb0ddd34fc541a274a67efb75d9fb256444fdd4c5680136497d8d2860bd027279566e8f041188d021644f1fc85bc2a1e20499d3d4065863129a0fd33b14ff12b66bac1d9f1eebed763d375064f3019fdfcf92d7d022f80576d7cc24570a4add36f0ecd2c6ba0632dddc22abbac1", 0x81}], 0x9}}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000004180)="d38257944b5826544bafe790b3613519484d0c663817df", 0x17}, {&(0x7f00000041c0)="e806556ad7a57d02fce871beeca7595d2a81ffb152f2f359c3ad1df143d3c68fc44214f0b0a401d1ee8f8781068f61c08bf8eb213d275a7bd1b17eee60ca7d24b8686a72bc4cc4101319e3afb29e5fbcdbbc23db64412a613aa7fb42d9af27c90a0ddc9dd9aa1c3fefa705ed8d7aec5722a4a754ebc286a63f0fbccc60ca4790807e797265429a91bceb3f957a5fc0f3c1d9f4fc5586b2622aca2eea1cc5b8a59935e7c860c57865dc5e0dbc9874d1320d738c5a8ce9fbe6b8956f08fd2fa66f49af5b44551777f83be4cfe234082dfbf7f0c6c8e1e6aa12ebc7d81f46be5f7f388f60c78e0dcffa569d2f1d0a8b2279aee42187ece2a14578bc7443a3f340e162bf7cbffd2ca193f8dff2b7e21f83595d5feb14aaae93f063cd0c3b6bfee2e7b637f14373df4662723b07408aed58daa99362b12c77faedebd42807bbab4b5e5374dd3fc378ce1d71a1136ab2869e7fe438ccf9db76874c4424058c35e10107898c11e066cb3d06628cc2ecb0c333a850c4ac022fc17b58ad722ea35f61fa3c049f27a905f93acfd7ad83498db54dbb3ffe2650f16f77d316b0a5dc7454493fc456d2e72bc1fc8e28f755b774f6b19cd335d60b9341aff8a38287a83d578ec7ac588ee2ed45563ef9c1e806dda806e19bfa8d2e931a58196ce263ca580e04535f3bed9a8e49e8e05c6954007f04c0d2f88ffdf0cc9f959f1bbaed4fe6654ec45cb37df55cf33b055813cb477fb7f25397ce6c9a5e1b188e0a3517421bd62123392df1c3e4cda799673a9931937548c01da624c4092de578404f5db2fa4c97a17c32baacc800f95181362c4e5c075a33ee06d613580cc5db83aab8f20e3eef878539a2a49e59788435b6e2f1338f3e2c89883e64d25a2500b4807e05c07753f7ea64b55ca6319369e735f43433c1218534efc165d060740b81559be3130bda0523a971e29db57f8aecfa60587ad31124fce831372955233636233a2e679cbfbca9b0d2afb6b0809fa0a96f14222aafb06b54ad79a474ec954db68e48d025398660156cf3712eab1505ab78dd2a1802c52c5438422041ac12ab8a5471c637aa5a07e0585db5440472fe297685c3b8975b37e80d0ade57d9f39bc81bc97725263c03f312c1b2d6135473d9184c4b49d21813fff6d3aa8fdf93613f5adfeff2f581507e6eb2d1d9283b166f6c673e1dc546869dbaa68e6a46710df67acf429de8bdf26bc6d33ff9a0bdbb75629b1291984de6714e4d53324adb5142f14ef01676f5647bcbb14319bd973bbbc009f31851fd8b4d15e2d3a11e7f3d0f3db0df7e1f75fa122e84dd9f7de6ad94c04e69b28abe3ef0a34d592502c4aef18695397cdb9ab10ec89802665c85c3f810eaf29b44108155b2017031082e12ce4ccf761d67b35093fdb272de43c343d0ff1cfe1de0788586655e62e801c2c6aa88ec327358c61bff3b63041dcfd4090042c86777d47d8fddebeb9f643da8f485d2b4dd517f44b3c6cafb4f3496d3b584cef9717d07c2379021a6db0bf08036d7a4715a4f9c3253009a841c926f3cfcb640d9e4b0c4ed114d6f3b52677844f603be53cd8ce122f903921699c9709e84d93ef98735f0808c5e0525ee5888aaf3d2b77e7233b4d17ad735321bfacbb116eb7384c439d7949c883fd5df2892fde7996eba558abacd2f46f9dee2cdf2a0b6695e9ab83ab10d7cd0258791a27a00916687ce8c593910f8e09442a6d2aa377a91e3b92477a86422ef729bf22866100641fed06245932f7436b25932049af06406027f9098a29ca311f8ce13e7eac419dfb41327d9230322f7690313e173eebc260202c0439755ae4d3665b9275405f8432fa96427337d2d628ca29b1f04dd516499f4df8c02eb99603f6f6f3bcae38943cc9f1eab0468d7a48392d58620f52caeb4ce895d15c8868b43bbc5c9a41bc7512706118e0bcbce69ab247f57da766e6c89810b65e7190a060d716e73bd0c67a0a2b51fae72f4739e1fb8fb02acfb830c1e02c7444cc8d071aadfc2fa8d2cf170ca6376b9bb27120a3b10ae0764a86d5401acd81ad0406beaed8849293f00963039a137a0f8a37842a4658031603576f401996024a72082462ee874f1aefc796cdfd4d09b6d0ddfeea0b6b5b0bfa2ccc64af1e9b3421f7c8a1986fb5183d800a1b7e2feaf0d9caed296d56d90cd9759d92d1ec5b29761f4c544c32816a522e042bc3c7e9bde486377e539cb16ad17fe092e2144a937b4d3e064fdd3a44e16ab9e340f124640527e9713b14eb3ff0db4885fcbbdfe238aee3d02e57bd749e79fb49be741e22331c8c1ef48d8959eae1b09198f7de50b9ba9ba544a89bc00cffc402166d38aaa9bdfd5025da604467290369914332670a9849545fac3eb82e2d2287d79526376a0c86bf6c77231378ae2314aae133ba7cc7482458d78274c5aac2ca7ce38ba3dca43fe018652bac7c4dad429c1d6282184027e6792bd09dc54082e7274cd15f622f7b77949e240a3c4e7edf0a30da72f09951fc37fdf47ada73b3a819f7ca38172657669fc54eef139425f3c6f1db0bd896dd4592878e7915ffde1a8ba78ffc290428908eb95d34e20b3c4fce0b427000037d613d8613127b458fcd99167d7d9aceb863a96016e94b21dad1ec4a7b4e2e46477652698387819ec699b87a4e0024681584016c7efc5050da2b75c2ad937d27efe26a96f2c9a97f24bb37eb6b06339fd355cf06a8e995234963500f3d57643fb1e44729870e8d0b65dd5b7bf378e474d07281a81e4e0ae9187f607d6672cfc2c0c26bb91174cfedb0a375c3d1f0775351fa6c5e5529ebac736adb23320d348d051706ffa10c62f647c89496f481c95232136629469045f6126303ab81addc693a2973c44706d9435b250675dc9ce4214d02f718743f01bfb3ce759ba4de3ed5d52ffb32593ee876a7c007310155335cc1139da59d81d0753ff7a09df201f45d770717cdd43cfc78c9398cc7b2134e0eed88cc88821d4f37aa3eec244a9f65637040c35e885479554d5901d74b55191b6fb4cd3b766d0d1f21a8761393c42f60cc61b692c6d11a547c9de35f708219b496437f2bf1d4399a0216cf828ee65371a61333095b8a445f168a547463328f4da0fd09325987e9d59162892b6e3c17d8550eda3f1cacb80622d6f38eafa98f4be1c54fe512fc56807f599b54248bab0308a6a3082e5219afbe89c813dddbbb31dd2ae167441835665fd91bd6fdff1a02a691bfa4e164cd788dea0839e2ebaa632896a096d7bfa50c6806064a2059543c4595ea799d49e9d47a20b1f14f71727ec5ed9526ded58c95c943dd69c329a55b333a4f7e3362c2535c673481fd54217fc51ba53bd8008b6b57d37a673ab2acaffb2586c1036c80f2efc426b66c61c5ccda0006023d9be89f49144adcd313fbf661023c4bb48c6ceb29bd40060fccd847f14b2b13c7a8dc46a44aa925df80959725d3c9824e6d19c967ab2d3d0019a50bd54f8349f2a6bc2f30f2c4dfc29178d6c403669cb9db16a06f49dcd73b82943d6c566b492b7cfd8231989991222cc17f3e5c5c42becc6b8b4ba734f66a682b8e68c7bd4be1c37553030e88f56b321b7d1624547875d1139b33ab550f4fe273fa852839dde2fc4dd5f7fe676eaca2be6b35845fc20ba79d65afedc9e83aa7aca636b1f43fa378f65d3f5543e40e73fe8785cced362331cbc45e5ddac1eb8c7be77ea963861e8958d4c66002c63fd9cd6ba948dffc42a143d6805e5946f42ed3e9b2f24e0af0051c34c1556fcb949b479afcc5426f412612905f40455c321660bd1a0ea7d9dd84f19ce2da5b4207f41a4f5f0918ff40b421a57021026b492d8f832ff26c5b9f8da4c3f853df77dc757d155ca89e0b9e6bfc097832da0034ebbce88b813edd09c6fa4858e55d60ab5af3509f12f9322a45c17a2024f81a233bd167b2ad785e26f8566da20b29c3ecbdd9c1919bc108d636128bdd6782ec37fa8fbc6a2f56ae005fa6a4fdccd6b34b67cad8f96f67567a9b0270aceb7d07083bfe9020757972be62381cbf3b31fe63d5aaa55cd9ba1291cd18a4d6f76911cfc9a5dbb27724315e68981bad6a24d8c1059f22893e4e44fadc01e6cece99e5a1da3ce60249dfb7abf7adbbdc96988990585b198fad7bdb44e9e996557356af4d070a0d8881fc1134ddbbdbd43caa0875e761a3f7597ceb3cafe85df4276c58963963ef6af444e0ffcc2f8978ea984d1de5cd8aa8a6b36fc8208084882f0a3be99232472552bacba786fb351db31fad1420d21deac7dcf35966a2240598eb6d3d73a2f4abba26b0eaf68c75b4c95ad79ac8d3073b8c3fb6bb30b1be18df4839dd81c9af0124d5c3bf9255538ea247458db0c143cfc0bc1089170005feda941245efa5273f54a892c3782d3409468c9f23d9ab3cec8cb8283f29fd73c3f431ac569f64037d0a25abe607102ba35ffcd453db36cbf006ef9a0261f3dbc7027974bb44f0145ab30c214148a1f9d5363d46985045627a621bdb6f495d5d99a67ed3214cfe81cb83ed1f543b3718eba96755134b9e9fca65c82f42f0a20a39af0e9594e1dee05d5adf8b649584aebe06ed9c2263950d283af097924392afd7c2319c7bf1df807cf6b1b374e45541d9e7ea9ec7213d2f1c67c20be1ba175a85630f41b384ddec1c9291aa885b03950e60eaf35147c2f20db4b977751cac0c96c73493f52a5c02f997d7df446004ba01e84714af4aa716579f30742fab9bcd8658b27c313a994cd50e9dc5d7836f58fb5c4b4f7d3930343a2896d2d894f24d590150bfdb05315dea64daef1085979f8efdb81e6a3050f59f4e12fbd20882fd83364c24ced39790fb56b4ffe9a916f198adb5b4ec761de973b21976cc43b95ed5424d357296f075e7e3d4ca4d97561c98dba4e2b8cbf25b6b85a67edc7ce01e1054cb271ec9174106ee971687eb1c5f746e77cf9b2414581e9bafda57667c437d57ec8f766f49a75707e29c8f4fff7f46704bd1e4c70b5f2de8d1f69d5e7abac5308737a5d12eb5b10888f6d99d85fb872f7b85392538c545897dde4a60b907bc7ab9712cb5272df642a5a933949614f72f145279c2a4f4b9ad079fffc4e48cd91c1420b6d191dc79026ad80b1ae0b970a605d69d03487404a1f1f72c89a764f1e6b978b3102ddbfe60e971c9650ab716a3d8eb78be1c7cda1a2b962fd243a06ec72795a023ef522a7501c28e275c11afda7bc9d580275761b7673e06f9bf05dc3cbffb9481ad4d4e2c54dcfee977b2a561e1711f1dc3dcf2a01c13e43b1b1a10ca780b721cdf7f6581218c75fc98937e0d291f0255950757f68899888bc6d351edd333148b386f0b1acce11309604189aa9e84efbbd1c40962d351e5ec9d9925c5436d1ed358d6e30af82631d46766642c85aa733460e91b8937dbf77ba7bf9a85c50077080586201514e263cf1f670e9a06dbe4c1c25f58e6da37ecd6446de738cb8044594311fb6b607c745516ce64c3baeb41e400ae443b0e4c822275662c8fe7c95b7aff5506a65c7a52301eb5d5dcda0ab086122b90a7d85e8e6571a17e5b37ce15c4b10614b1f96ff6248c5588b5ebc6d0574a36f15af9217e29e4d26a5246ad047edcfc660f7d3ec17642aa52177c2d34d4c5e775d4ff2d71e136d0c3f611cc76407bae41dd8f3ca98bcaaa17d8e8e23bd3126ebd888cf38508fa2bc9ba31e7f2a9f6806e0ce672429f7d5f7117a2cfb93274bc2124918934cc684593c6e0011be031b9a7ee3d20e94c092664caa80c39113ec45c8979d49311e277bb3f53a4638a857", 0x1000}, {&(0x7f00000051c0)="fbfc703cb1c1e125550248b502421dfef7c48e0128ccefb298d4b2e6929574b836977dc559aee330aa", 0x29}, {&(0x7f0000005200)="8710acd61fdcaff1fdbfefbfb50cc7099c1b6cd31d7da181dfc95981510fe944034ee847496db0b37cb208f5df6cfe7a4087e36511bf3148a68d092adb190bac96ab31c41f934eaa16561acd692987223b3395c33044c5ee365787028e3b04cf2d19e5806a9c868eb34911b903f4d62b0c4485f46c8828ca85d849ce19a7a92bd45c86d63af1eed2c39613f6e99061b353ce3cf4b1b1ad11a99f6458417781a015837c53afd6c01a5599c31133751567fb2e876018072bc8f0da78537ff2edfbd2469c3f2215c046619f0ecc62a19088094457e05ffc13ba55084d45e55fa0891dd6e505c283b8de71d09f14569eb6cea6b3eeeb0f285a931ac275d7019491ce2628c3a9d795615757b5031a02983b0269b8c02e393c23255840884966e953d59b54aeea9295381d7b8825a988c28f41a705a0366e865fa724665276b32c892370cff586e3de2478271a19c22e20ae3dcc4d61398c65e5bb916291c982886a91077fe47a8c526b1c50fe56039846ebfa20987eac268d9d71eb1116b2650b55f9e417c20bdd53df42e26a8cc6af76f2b98d1f7c1dd69c39b32b4ef5cf64ef040422697ecf0c944ffb384fc4ce2988645166767a503fc63aeac0761086e481c173de587e7937371b98d4303c941be4f9a8dff01e8f09bad26ae7de2e9cf01fd2b774e1cd2619af8cb577f1ac6cc40ffe088ffda44c2aeb7b8ed6824acc0fe9c50291b8fc077f5cefdeec563176e8bf97ad69a50c95b86b55f3bda46083de94ab2747314f5d786b5a4aa10b35c3909f92aa52177ea9e603d1e9df5cad7babd0779183c40497fbfd8887741318eb4a66121bb9e5882c1e61a47e270b4bc3c7a31c354d782380153b56e37b812147d5499106ac735202f82dd44be5a980a812818bef4908e0c81ad7411a24f306f61e63869681c87cd3cb0f9c86cfeb9567dfbb238964bee49bb025475009451c5ef9eb114038b82cae13d1828553bf51520a2d58916a4bf6e4ecc654ee33d130147abaacceb8644dea025f01a0701dff553bc410cd0566c65980f78c9501fad4172d51d22686b0d67ed8c7c13555db49ede346af148c0b515423ea06d0279a937e412551c1301818150eaa24e0b965a9b068d6bb6af306e42eaa79b1b692cc71c2256e1cb56c9f12ae5a8b26b053ee501b223029b080381c402d9ee243b97e71031a629f1d4572b014c05590a24ae9eb1a7fdb3539447c8f5fc17fb8fc332a254d5b03a585ed0da75cbd3861ae2303ca8831281f2d5a5a5de597304a50d30b53086aa2c332f5e93e4f4f7a7f65817669ba22a887f666764f5fb2ef88c3a1e8adc4888df8efd6c5f7700096e0d9b29b0e9ee6637c19bf1d32b9017fedd384aac2ea99f528782ae9f81c728a383fff4a839520d0b491e57a6f2a3ee2a1e30bfde3aecc2e7d9ded81839df6baabb7e3f7c939063255f590047fe21228c2f98419aa72764797168a075c911a5ed5c647382078ff03983019ae92504d2a43f810f5f9c495617f9b5a1296ede97de49895c06961e1f826919739c62b5ee6409da1ff5b142a2139b8ad2585472ca92db8c5034b80eddf6430d542792f70af347df97c5fd3d916889fde501148cb167376a094ae04e2062aedb63d6a1fc8188302b958c65b28c3d27244d80444e8691a2aac8187fed9e13447f7fa81394cd801f3799a62b32035c340dceea36dc1566eafceecac7567a4c34568f9460dac57795b5ad4e2e3e87869298c121f2be6d5cbd37d0452d56b24e572800ab213f4b3a55c320640a2f8a6673559614e3a3ada6971cfa164c36aefb8e25cd11d34c23d0ab5fdff56c22418738eadbcb293b495ad16b8d66cb4a0ced9026181eb48586f4c0997774c9b33abd15094679994af4fcbb4160f4b3489a52f8401216b16e57512e69369d897b2b41eac426db89ef31f1c9679ebed3f5bda36c5c4ff79a8313279545259818ca63ea09449ee5788da958feee2a22dc8aa94807ca5c27fbcc17ccd05431256d473febc978cc9ecc5aaeec8d6f10a73e98c517353aa611931e3caacd3a81e85a16178ff79b9a70e418fdd7b4cdc64b4e18f566e07bd6b4e64ed7952a2daf43907780d2ab1530f5604460d059c5f255d140c07a5c483eaf7b75b31259edfd00dbd772e57da5bbf59028d731826d39cc0634a809dcdaba9c1002ac29d0a5a7c65ed5162df8ea854421dcaa317bd500b9e3c26a13133abe075b413a26932c07bc005aac94603ec5a9e5ed291ae4c531b0c6d6be73db6cb0392d7775132d7b1fabe186307421d0684be61d1902df6dd5da3dfc908a9afb1c150cbc6b618a1af235d6386f3f1c1cc2091940606f8c18d73d181903e6fba43db3ea4b31d8da0e4dc67c22a292fda8e3bb06839a61562c6ac7338cc999053d152f54aaceb8c69d64c1e9e0bc50921792fa845da108371d7f49f7281c5a9d4bb33d77ff0c45b74c83c388df718f54d58ceb3197a60f0f33688f91b0ea3fae1eebe2e1f1cc90fbff4258185d7df7aea9d882fe020755bd22066cfe69eac764fd4dcf9a6da8f6691c03550e1980ec179bc4e16825798726cf606f2cd9215a84788ef61ee7443fe729133ef87b58fcabe45cb0b5c89de75e63713512c2a8f3bc70e9f6d921178ede15294bd0513d21c9718193eccb2e0c2017816bd28081be99eee23b9819fdc462af63320c7f73c97576c6455046174ccd1781cd7fe3260f55243b869e903530f9039da0e042d618f0322dd70eef37ed2a3b03010f06759ae31fcfa5295de4c8ca9cc9f4426eceb46d2c089f1e869c8810554c38b7a79428bce21f3d8da785464d6cb598045b1225af2c313bbb1147fb33d16f504e32278949a10d78b7596486633058d5c6c1aca3a87aadb83d90ee4a000c9680f0dd64b33244cb6b912aacc4904f1a507305e9e252ff6e31d888355dc42f67417df3707167ee50bb304fca93b4c61300d6bdbbcc6fb57dff3a7fb7adf5d97ee47fb8f5b544ea93d83678eaf7d54b644d0c85b826a968668a1fb06299ec17d13f80886b0a0c840d919698f4fea1d7ede030f8be7aa92f330408324b799963695704668296f4238e21868a6caa78d4d392282c77964e1ace1163c7ab19f63ab464779eb6a185a07b4b5e73f2655839d6e4874f7aa76b4b6ba5c24260b4369066f7e0d2f969af7941054b89e82693128b227126d6a0358efb288dee07016f1499cda108320dc9dce01b86ecfa220971a7eb82e0d525323d5c03fc51bacaa2ce079c52905ab1d0cda9f252fc49a4e764de8071bd3e06dac54f4fc94222e3e20f8901788f50873e162ce620e4ddec9a47f2e020ef82c546e4d99252e64ec9d71d55a4c1b0ed69eb5b985fe0f710b3ad48318741fdb0945f1d6d81da3ddea829dbb852a6f75d1d13f737f0e7c8a6cbb5ff7cef49016472a5d17575c710101bce12371ab9624332f3281541fb5c622292bca251c25d633e7b50e443ea2471bb0dea09e654d12034172811a7428b46893f2f8684c5a4c08013073458167c80228ce995b97508fe14965d76f3bfc006c36399c2636764ac6ee065be915b52c6a54e24d00b15a7362bd4611589c8b31f0014fcc57a107721223ff7b3eefaceda145d0c72b6e1f88bb834f1e28561d12a75576cc24a0b2144c7dde95cb878ff745a0a33ad962805d5eae8ea02cce74e98704097a79d5c9ab4ffa36f41e80778e001ce09a831125878cc66545d80ebb76cb20a3fe31c667e6495d48903c5f0cf4110c043d93264a6b0e2d92a790eac87026ef7342c3b5890d9a01c822910892d166afb2d40ead2b982cc61068ca5b581b3c4d1d1131dc8653eb2f861175fc1b30a680c01a1221ab812a8191f291abcd51c47067237067c1cf7c9ac7db22157a51532a1105f071d20bedd0420a8dae10b7b31fa7ac9d6b233839733c9618f25fb39a036dce0d6d9fa0b90926e87452bb80d4f7a11b708279d4d7446a282894163dd153ac9613d18d728a6d2bb330262fd34225e33e109f66cafe703a0a7a4c7d2955115be54a31cf49af4311efea8325126177c95662ecd0eb61b79d41280aafe5ff794da6558a58e987edc937ad8d4f19ae98365e53b21f78dbb09c26859e2a6720f7001cc45bcc12035537e7b66c23a7438859ec44aef92ad8bb8186a3250df6ae47e7035a4bab91807c6396859f55719b0b2ee1d61da558ed9a13a98df8c045b8ae22775d4dea5cf1a0e80c10846d266b7b03d98e31fcb4c71b5869103488b7d4622bec4ee0dc92a1bc0d47e99ea0e70db221dffa81871a364ae79966feb0117394431857348f57686cf590b5ceb982dcc6ce93ea3343d2876f176b271699d731b3984080bd947c154ac6849c50487fd0c34c15e26d1e9574bbe0703498ef31fb10bf3fd6612f48136448a945764ce9608eae821cc17c9637b59ffb04a0b0906643c5c907bc5f33a8a7c8f5ddb43c9fe64f45a5485dfc6b0d86680827597af15f7e5f61cd733adafb2acec47da2b0d1bc97c424bd766f1890e1eb036f46646947e7c3334fc50c58d9665cad55180e94fbb8c161d923f7fa8cb6708216fd2e568d7ca6b2f3fca5321f52e0ecb8486f8b655bad543ec53334ba3931256b1c797f336fb897ffd99c0be159c2e954d8a5afa648a4eea2d8ed779469df9f507b700796c086308d2519b4e046b2b1f4be19ed5f90a674f5de877b86ef7e6a8dd0fe60029ce0e0b595b46d541961a916f4685e4898d609a8418d1116dd25e89a17a29ba9e2c93c86b5790b65b6c66d1f454fa251a3bd5daafa9968bb50fa609ca529e7edcd5cbbefbb61369f5e9e134ec0208488085e354c8190377812d0f18af3f10df392e55877d6cf87d9383a992e562cbc1643bd7001343d394b36344811facc05e3187c0f568cc01e5ca2d0d5879558c6e0103e251f20b06d0f76a784b805fd0e0d485f16ec320d7fe756ee1e0f6616dceec4daf964127480e3bb79658ae2b09083657871af0ad73689f121e7928fc3bd088d5cfd46f80375c663e0660e61cf54f68e4cff3a4d6a6ef3f800643fa5ed0c12c4a15d4d337e064ff4f03faab504d19c810804c1df3a791c6ffb8eeffaf76adb06766f12b24a7b89ad8271de9fac3cc0748525e985d42ecd23240f873bfeb04ecbc2c3bd0ecfaf554d502c6cd056c23794bc14913a5102d5b1e0b02e552706adbb6047ee328ee9a5b7c9c52ae79751372149dff3e0fda5813e976d41d373c2d140a8c7c6956b4443b9a96f321e8828cdd68294d1307c509d93df7abf5de42c94919a98d0d322f7d4fc9dd5763726bf09a5da46e17f535915d86c8538f5a5e45d52eea873e89e1a06505e16778957755b4e26a86c9eed70aab180f6083ab46d27478a35e81f23671874f5902df6f80aa5cbc0acc25250dcdc2211357e1df5ca0db8f025223248f725647a16616dfc7b88b9779459f2669d5930e0a8881940692d49d647c9f414f4b24d9567aa69792bd9949d7648afbd2cd44c96d64a834f5385646327fdd7fc6998acc3758bf7429470d4fb4fe9d6c3b0f508ff45eb85beb653dd09b1f319b5d7f1531c6e812db529a38d9c15dda2a0e3020760e0ba9245e0ea0e2af12180f21383a7263284e46f1ca49a7c2e7c3fa1d1fa0927c9b481c0dacc8a332d8e6b9938a098f37b20e945d1faf14c89543209c255720feb9596bcaec768db26c772b6cb6ce5c9f6792a03987642ab667e4370775340ea8d6ca4466eb818be28dcaad738a6dffa92f0d5409785a356e1c2a83e7f09e94a7c2686bcd91be3f0e0cc73c0605384a7ca3b7c2b03136ccedc572fb12f4d1382", 0x1000}, {&(0x7f0000006200)="4aea3f62b3dba6ce724959d2956b8b39a9c3cfa5ba8651a02b9ee6d43527f66d2682b83591e36e4c24848fb4b2a53819d745e1d1639e756745f0619811021a780355591132488367dd12a5e548a9faef575a375ce1ca912e92d147ede10b687997902f19fdaec8271e299085783e8066cf06546f331476f6", 0x78}, {&(0x7f0000006280)="a8b6ae6d8394bde8675d393d4ceef71e4a3694990b44f76e889fc567df6d6ee9814822d147eff28d5b383bbce31bae791f383ad32de8f3", 0x37}, {&(0x7f00000062c0)="ce07c418380903520bc9ececd4d91e0a71fbe987b330fcaf1cabf5cd13453bac8f5858fb75cb865abaefd401d429203c27b4e59f137ba7bec0b44c45c67ff629d25f20ccd638bf09", 0x48}, {&(0x7f0000006340)="608956011542c5f54ab780ab29fa12d5eea538660b2079933e1dfadac89ea640a6d10b5adba2a675084313dc65631eef78cb4d79e25335bf2900a7a1ea31c22de4e4fdd2f786d0bd5e6b54dbaf736f17f38c0ed0a68b3be9043742858ed1c33a5985a30ea4aabfa523451fdc548b74e2a47124cd8f465d8554f376275cc3c1cfb9546ab89730eb735f486cfa1d42a6af180492e3b6471000fce4ff1d8f211957c198d5783993de1cb75fc205efca5086719280297116de5cc61eb5d9fff2cc190dd302fa016a4ffad89bdf3035d7ef3909916f554d86b19dbb82bd58c5649d6c", 0xe0}], 0x8}}], 0x4, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000001480)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2}}}], 0x18}}], 0x2, 0x0) 15:44:46 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffffffffffffbc7000ffffffff0000fffc0c00000000000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf501fb1bb949869c200f0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5000d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x7, 0x43}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ftruncate(r3, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4c) 15:44:47 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @rand_addr="6e1704870b36d0cd3bb056df47b5755c", 0x9622}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xb1e5, @local, 0x176ad09f}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb5e2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa98e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:47 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='comm\x00') ptrace$peek(0x2, r0, &(0x7f0000000000)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="00000080000000004c000000000000000100000000000000", @ANYRES32=r4, @ANYBLOB="000000000800000000000000eaffffffffffffff00000000000000000e54a18a6b992176e9dd0be229fb63cd8154d39c06f658c3e2bf874820f32af2c30797580f8be4155b6c01bea667aa"]) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r3}) fsync(0xffffffffffffffff) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r2) 15:44:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000080)="d7fbd7e27dcda94911278f514321a749a9bd34d086fc33b69b9f4ca9c59f9dcd63b80138bef63bddee5d7b6842f44e298dffb828dc57d12b544e4ad71e61e82e2e120a1dfb12b12c01", 0x49}, {&(0x7f0000000000)="44b60fe06f2573304c40b4811e5a0833e98aa8020500b4aa357e2a92c74e803b6a6fa28d165ab0a4e22a2ce2ed54fea6", 0x30}], 0x3, 0x10001) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="24000000660007031dfffdb06fa2830020200a000000003fa61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c00b44e099d881e02546dcda4cc7e639700"/76, 0x4c}], 0x1}, 0x4000000) 15:44:47 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc0900, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22401}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="000127bd7000ffdbdf2503000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040001000000080001007063690011000200303030303a30303a31302e30000000000800030000000000060004000100b2760e0001006e657464657673696d0000000f0002006e657464657673696d30000100000006000400020000000e0001006e657464657773696d0000000f0002006e657464657673696d30000008000300010000000600040000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x1404c090}, 0x4000441) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0c56205f92f672fa3f9c9dee7493cc0100663c00df5ab1725053ffff0000"], 0x14}}, 0x0) 15:44:47 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x102, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x80) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r5) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="5afa18d5", 0x4, r5) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f1eaad040595ccfd9f5dbaf70e89770d973f1290c291aba0e64860308bd57a77ad86e4879f8bbb4273e747029d98ec26d347c12dbc3f4da1975994c4961b72455d920ee3202736a35083440f23dc7e98c26113210cfd35127f8002e9e9aa03ed0463eb129efe23294b254fcba1c630ed89dc202ba5763fe44d1a137a1e79d4c6a8820aa9ec8440ac9c63dfd40aa6399e9a38786b150f4f5164b4b6a9bb6f51b08cce5326253289e2706d4e6863ec8c9e5ed7a2666b0bd3b16b4fab0edb10f1955b9a44eee1cdb09a884caaf0025d205fe6e77b4a2ecf6ac1be6158d7ef173938ed6880bb740e31a16d73166c4c54d9d9d9d046", 0xf3, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000380)={r4, r6, r7}, &(0x7f00000003c0)=""/169, 0xa9, &(0x7f0000000500)={&(0x7f0000000480)={'mcryptd(tgr128)\x00'}, &(0x7f00000004c0)="f17e244674dcd0a9a62640de9fcb31b2cd230249b97a20cf16e74b905063c9baa56ded472170203f417b2da4d5ac28", 0x2f}) syz_open_procfs(0x0, &(0x7f0000000540)='fd/4\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 646.685391][ T1320] IPVS: ftp: loaded support on port[0] = 21 15:44:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000002c0)={0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'ovf\x00', 0x50, 0x0, 0x50}, 0x2c) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)={0x119, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04n\x9bdevselfwmd5sum[v`oxn%t0ppp0%', 0x17, 'ppp1procvmnet1\xdd)wlan0+]', 0x91, 'cgroupppp1(\\\x18?\x82u\x1a\xac\xf2\xde\x8c\xca%`\xc6\xfb0.%\x90>\xc3Kd}D!\v%\xbf\xc2\r\xc5\xe8\xa0*-\xf8[R\xf4m\x93F\xb7\xaf\x13\x00\xe8\xb5}\xb4P\x87\xc0n\xed\xb2\xcd\x84H\xb0h(\x01\xbf\xf8\xc8\xfa\xe1\xa1\x85@\xac2X\xe40\'TJ\x83\xb3\xf2\xc8\x12f65f\x04D\xfc\xfc\xb2}\xe5\xbf\xe6\x91k\x8f\x82\x91r\xc0\xcc\b\xff\xdf\xda\xcc7\xa4n@O3\xbd\xb1AE\xa1\xd6!\x8d\x17\x8b\xa3\xb3\xf0\xbd\xb7UH'}, 0xa, '\x00'/10}}, 0x119) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000300000000000021001300000008000100040003000404000200040001000400050004003264161f52143e8a9e44b6ccfe02000400020000e10b200afbebda36b23636bbeb889bbd5a9d6bfb67000000000000000000000000ffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, &(0x7f0000000180)=0x80000001, r4, &(0x7f00000000c0)=0x20000020, 0x200000000000001b, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:44:48 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000080)='comm\x00') pidfd_open(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="f3ded198e929403860217bdcaf58fef0077736d8500f1056141eb1ee79d37b229c26b5de6e4c41c622df5c270f889a03eee72260ff240a7a168e103a5884ca21b4fcd320c5be31ffdcface96411dffc2a68e69d832af2f1dd3a7cc63b511e3cd52c3227e1afa6c256c43a68a6bc4a8f4d882c101d83f50366908f3ef193b7260edde3df4c23a33266ce1d4e212cff5ff9ac9d15ab9539e8ad6f24c6386441246fc35909f9b0ac804965d365b95de2f2eeed14fea4ad65760b85eca746508be394734329146cb68e9a8c573817616efb9ed39f28def583ad791af678ed91714e9095f130e026ccb870b8aefb251977924654e5e38cd5e626fbc1c220e13bf1e9b") r4 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:48 executing program 4: ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000100)={0x4008, 0x2, 0x8, 0xffff}) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xb6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) dup(0xffffffffffffffff) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303, 0x35}, "e37e2cb34656af2b", "443e7a0d69f6a9be7332f0aa4789408f", "d4c977b7", "2cbce8f079868acf"}, 0x28) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r5, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0x8004550f, &(0x7f0000000080)={0x80, 0x0, 0xfffe, 0x4, 0x0, 0x0, 0x0}) 15:44:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000052d8284b4d6ca4ad05b75b8773eac4886444dd2e280d9c269e87e91fdd2570b06110212cd11a89524db4a2fcf995c993f411d8042bceb0cae2be895910ada637ff42bfea5083adfc63fd2ba91b5ac180e2c5"], &(0x7f0000000100)=0x8) [ 647.407780][ T1423] tls_set_device_offload_rx: netdev not found [ 647.461769][ T1395] IPVS: ftp: loaded support on port[0] = 21 [ 647.585918][ T1490] could not allocate digest TFM handle mcryptd(tgr128) [ 647.733099][ T1365] could not allocate digest TFM handle mcryptd(tgr128) 15:44:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x29eb00, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x6, 0x23, 0x0, 0x9, 0x1f, 0xc6, 0xea, 0xbc, 0x9, 0x3d, 0x4, 0x0, 0x2, 0x7}, 0xe) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000000)) 15:44:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000240)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in6=@rand_addr="02ed4d73062b85e8a45dfa2e6a347805", 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}, @replay_val={0x10}, @lifetime_val={0x24}]}, 0x194}}, 0x0) 15:44:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ftruncate(r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r1 = epoll_create1(0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x17, 0x56, &(0x7f0000000300)="a6ca6443eee7df7b64d6405346b0c563dcf9d68533c0930bb219a23ed5b24b6f1662e8e3d480f4a07ebdb4f8c7b3e0bd8542a8af054dbbe133b90cd0f70755f1570143e49db407dd5c604ebbc29740cbd2c0ac4c76f7"}) ftruncate(r6, 0x0) getsockname$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f0000000240)=""/27) close(r5) ftruncate(r5, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000000c0)=""/151, &(0x7f0000000000)=0x97) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 15:44:49 executing program 2: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}], 0x1, 0x4000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000500), 0x69, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2084) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040)) prctl$PR_SET_FPEXC(0xc, 0x10000) 15:44:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000040)=0xc86a, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2cc, &(0x7f0000003500)=[{&(0x7f0000000180)=""/181, 0x93}], 0x0, 0x0, 0xb253ca6d5c0babeb}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ftruncate(r4, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0x3ff, 0x3, 0x4, 0x10, 0xffff, {0x0, 0x2710}, {0x2, 0xc, 0x20, 0x4, 0x1, 0xf9, "3c83e5b1"}, 0x3f, 0x2, @planes=&(0x7f0000000080)={0xffffc221, 0xfffffff8, @mem_offset=0x4}, 0x6, 0x0, r2}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfce5, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0x361, &(0x7f00000001c0)}}], 0x480, 0x0) 15:44:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_attach_bpf(r3, 0x1, 0x42, &(0x7f0000000000), 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c0, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1800000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x230c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ba}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9557f63}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcd0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x1c0}}, 0x11) 15:44:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4, 0x9) recvmmsg(r4, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000001380)=""/122, 0x7a}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000001400)=""/108, 0x6c}], 0x6, &(0x7f0000001500)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000002500)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000002580)=""/108, 0x6c}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x2, &(0x7f0000003600)=""/173, 0xad}, 0x9}], 0x2, 0x40, &(0x7f0000003740)={0x77359400}) close(r3) ftruncate(r3, 0x0) r5 = dup2(r1, r3) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000003780)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x101, 0x5}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ftruncate(r6, 0x0) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000003bc0)={0x2, 0x1, 0x1d, 0x18, 0xe0, &(0x7f00000037c0)="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"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a2b000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) 15:44:49 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x1, 0x13e}) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 15:44:49 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x80300) unshare(0x2000400) r0 = socket$nl_generic(0x2, 0x3, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x204000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(r0, 0x8901, &(0x7f0000000040)) 15:44:49 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000100)="39000000140081ae00002c000500018701546fabcae5e5741af20f367c355fee27a04f7e0592616675e285af71583c7d06a6580e883795c0c5", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg(r0, &(0x7f0000000b80)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x40186366, &(0x7f0000000c00)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000b9003e8a633366bbfebf1de16c61ce2bb72892a0862a1b8fe7d6549422bdd55be312fad350b3af1fbdbb3c099988b7582691703ce637074462d3379426f085d759641f3a4402ab5653c02d05f334e8ea30c7d28c3d5bc2e415995aff6804df84f576876cf8f6623f07bad4e007fc467d8a0ddfdf5fcf4b9496eacaf779ea981abfeab2bd5f954821232103810542e141d56a932f8c710d0200000000000000ca7fb290df3d88c8193f96d0a0"], 0xbf) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, 0x0) r5 = dup2(r3, r2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000300)=0x14) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r9, &(0x7f0000000200)="200000001200010000000066835f7f081c140000000000000100000004001e00", 0x20) sendto$inet(r9, &(0x7f00000005c0)="38c2b0c954357e8c9dfe3cf86a1052ef3f2b2455a72185c365d820599cdd63ccadacd8b3f256415d4d6d954f9bf3c4b271b50f0470eb0b8f8a8b39919ad7c4bb965b36318bb7d0788ffdb09fb755169715a28e35c22389b8ac31e7b4d73d4a1c4567d55dc2014f6d91b269eb81a44cbb2864395cae434766c138a12716ebf1ec497949c8ffd1455573d50071420f085dc8522dc505b48b60acd3806d5a1b2ebc40c1ce24f4150cb299652e43cb314c", 0xaf, 0x40000, &(0x7f0000618000)={0x2, 0x4e1e, @loopback}, 0x9) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="ad8f39e93d547f83798ed1b832379589a35554e199eeff02009aa0", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000340)=0x3) r11 = creat(&(0x7f0000000380)='./file0/file0\x00', 0x80) dup2(0xffffffffffffffff, r11) write$P9_RSETATTR(r11, &(0x7f00000002c0)={0x7, 0x1b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000900)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48b0346273bd0f03, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 649.108615][ T1652] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 15:44:50 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000002d0081aee4050cecff0e00fa078b5bdb4cb8e178485e517f5ed218a874000000002ac47169972e6d758e", 0x2e}], 0x1}, 0x0) 15:44:50 executing program 1: syz_open_dev$media(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x13c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xab) openat(r2, &(0x7f0000000040)='./file0\x00', 0x80c60, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000de3000)={{}, {0x1f}}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x3, [0x0, 0x0, 0x1, 0x5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x844e, 0x7f, 0x9, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x9aa, 0x0, 0x17, 0x7000, 0x1, 0x41c1, 0x9, 0x0, 0x22, 0x3, 0x0, 0x7, 0x3, 0x8, 0x3, 0x0, 0xde, 0x8, 0x1000, 0x0, 0xfff7, 0xba2, 0x1, 0xa2e, 0x81, 0x3, 0x0, 0x9, 0x8], 0x7}) r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x20000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes128, 0x0, "2fb89c659ef497e8"}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x108c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500084fc5d63f61101800000000003e5a040000009a536f00009500000000000000f86454260487dc068de73ad80ae6fd21589574f8a932860777aec99b5fa6b5ffda21833a0400ab4f5490e39e0468c21b6506fbcc27bda34a919b94efcf971cd2cc861e67872bd942236f07f6a8db19510a45b08ac88157049f0dad1e4e5b3ae011b3d6c60889f70aec26b7a6e938db6c384bad"], &(0x7f0000000240)='syzkaller\x00', 0x40003, 0x27, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0xfffffffffffffcc1, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x10}, 0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x480480, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x2000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, '\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", "552573ed", "b1034b903a64f865"}, 0x38) sendto$inet6(r5, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) recvfrom$l2tp6(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x20) creat(&(0x7f0000000040)='./bus\x00', 0x0) 15:44:50 executing program 2: write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x76, &(0x7f0000000040)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000100)=0x10) [ 649.422055][ T1697] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 15:44:50 executing program 5: r0 = epoll_create1(0x80000) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ftruncate(r3, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 649.535644][ C0] sd 0:0:1:0: [sg0] tag#3707 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 649.546266][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB: Test Unit Ready [ 649.552997][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.562827][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.572684][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.582495][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.592309][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.602117][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.611921][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.621651][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.631468][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.641326][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.651147][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.660957][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.670757][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15:44:50 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40007b2112002f0a00"/20, @ANYRES32, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x40}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000300)=""/233) ftruncate(r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0xffff, 0x7, 0x75c9, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6f70f842, 0x1, 0x4, 0x40000000, r4}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001400)={0x1, 0x4, 0x1000, 0x85, &(0x7f00000001c0)="e5ef1c36dfc1c9d1b3f71007f6fec711af4396c3e385902c145d6dc7540ab4657bdb740e29bb31d93f5c93582b9ce937c5f17052c2584faa8dc38be70417ff4ee3f062fbe57f08db604bdc68c11ca7bce48a3c71a3177b6089ccc572595e42751bb5ccc510b27ab67b34a40ab71ba9de4c91caad5e698fa56177d6dde700e61ba17b8c00d6", 0x1000, 0x0, &(0x7f0000000400)="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"}) close(r6) ftruncate(r6, 0x0) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x8}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ftruncate(r7, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000001480), &(0x7f00000014c0)=0x30) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 649.680563][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 649.690371][ C0] sd 0:0:1:0: [sg0] tag#3707 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 15:44:50 executing program 4: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x3}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r6) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r8) r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r9) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = fcntl$dupfd(r10, 0x0, r11) write$UHID_CREATE2(r12, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x119) read$FUSE(r12, &(0x7f0000000200), 0x1000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) ftruncate(r13, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000001200)={{{@in=@remote, @in6=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000001500)=0xfffffffffffffe8f) r14 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r14, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='iet/wireless\x00') r15 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r15, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='iet/wireless\x00') add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000001680)={'syz', 0x2}, 0x0, 0x0, r8) add_key(&(0x7f0000001640)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="cf", 0x1, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 15:44:51 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ftruncate(r1, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ftruncate(r0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x16, @rand_addr=0x5, 0x4e22, 0x4, 'ovf\x00', 0x8, 0x9, 0x73}, 0x2c) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000040)) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000000c0)={0x7, 0x20, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4020, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60020000) socket$netlink(0x10, 0x3, 0x12) 15:44:51 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ftruncate(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012002f0a00"/20, @ANYRES32=r2, @ANYBLOB="eb002e000000000020001200080001007369740014000200080014000800000008000200", @ANYRES32], 0x4}}, 0x0) pipe(&(0x7f0000000040)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 650.292411][ T1809] IPVS: ftp: loaded support on port[0] = 21 [ 650.331239][ T1781] IPVS: ftp: loaded support on port[0] = 21 [ 650.375007][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.382758][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.390375][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.398609][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.406305][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.414071][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.421595][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.429180][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.436759][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.444354][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.451948][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.459491][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.467082][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.474661][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.482242][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.489787][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.497435][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.505023][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.512599][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.520135][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.527723][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.535300][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.542887][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.550437][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.558032][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.565758][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.573353][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.580895][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.588488][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.596086][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.603686][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.611233][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.618829][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.626421][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.634022][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.641586][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.649215][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.656821][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.664535][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.672135][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.679697][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.687302][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.694908][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.702530][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.710086][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.717781][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.725402][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.733005][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.740556][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.748241][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.755864][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.763469][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.771052][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.778795][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.786426][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.794062][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.801622][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.809251][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.816885][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.824533][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.832147][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.839720][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.847341][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.854941][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.862604][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.870157][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.877778][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.885379][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.892964][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.900493][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.908083][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.915677][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.923265][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.930797][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.938380][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.945966][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.953556][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.961096][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.968690][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.976289][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.983880][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.991422][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 650.999025][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.006640][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.014239][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.021795][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.029418][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.037028][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.044636][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.052233][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.059786][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.067518][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.075132][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.082739][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.090300][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.097900][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.105531][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.113138][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.120682][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.128278][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.135870][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.143475][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.151026][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.158624][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.166227][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.173810][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.181342][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.188930][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.196521][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.204124][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.211698][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.219330][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.226915][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.239483][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.247108][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.254701][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.262296][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.269836][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.269858][ T1826] IPVS: ftp: loaded support on port[0] = 21 [ 651.283440][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.291010][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.298607][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.306335][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.313925][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.321580][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.329203][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.336790][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.344394][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.352008][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.359578][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.367188][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.374797][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.382390][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.389938][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.397534][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.405126][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.412715][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.420264][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.427859][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.435562][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.443165][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.450739][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.458366][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.465979][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.473602][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.481150][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.488761][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.496369][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.503980][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.511532][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.519137][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.526744][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.534355][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.541964][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.549521][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.557128][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.564734][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.572446][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.579998][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.587652][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.595255][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.602918][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.610457][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.618045][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.625744][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.633350][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.640895][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.648489][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.656077][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.663667][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.671229][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.678860][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.686465][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.694132][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.701682][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.709327][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.716960][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.724619][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.732224][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.739816][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.747425][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.755059][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.762695][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.770234][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.777474][ C0] sd 0:0:1:0: [sg0] tag#3666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 651.777858][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.788176][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB: Test Unit Ready [ 651.795663][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.802141][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.809556][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.819176][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.826651][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.836267][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.843757][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.853373][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.860780][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.870416][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.877909][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.887537][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.895014][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.904627][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.912095][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.921638][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.929137][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.938783][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.946277][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.955896][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.963375][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.972992][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.980400][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 651.990020][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 651.997494][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.007110][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 652.014582][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.024200][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 652.031598][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.041224][ C0] sd 0:0:1:0: [sg0] tag#3666 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 652.048696][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.064754][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.072400][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.079954][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.087631][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.095224][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.102815][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.110350][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.117948][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.125587][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.133292][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.140837][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.148444][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.156034][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.163627][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.171158][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.178737][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.186322][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.193921][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.201477][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.209082][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.216677][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.224272][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.231820][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.239415][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.246992][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.254594][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.262198][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.269740][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.277342][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.284983][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.292605][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.300153][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.307744][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.315323][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.322899][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.330432][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.338031][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.345638][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.353230][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.360769][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.368370][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.375962][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.383580][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.391107][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.398687][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.406267][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.413848][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.421375][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.428952][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.436545][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.444125][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.451657][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.459242][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.466824][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.474406][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 652.482004][T12814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 659.671745][ T1702] not chained 10000 origins [ 659.676308][ T1702] CPU: 0 PID: 1702 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 659.684899][ T1702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.694957][ T1702] Call Trace: [ 659.698272][ T1702] dump_stack+0x1c9/0x220 [ 659.702625][ T1702] kmsan_internal_chain_origin+0x6f/0x130 [ 659.708362][ T1702] ? kmsan_internal_chain_origin+0xad/0x130 [ 659.714268][ T1702] ? __msan_chain_origin+0x50/0x90 [ 659.719390][ T1702] ? skcipher_walk_next+0x111f/0x2850 [ 659.724775][ T1702] ? skcipher_walk_done+0xb2b/0x1200 [ 659.730091][ T1702] ? crypto_ctr_crypt+0x6dd/0xb10 [ 659.735126][ T1702] ? crypto_skcipher_encrypt+0xce/0x140 [ 659.740680][ T1702] ? crypto_gcm_encrypt+0x4af/0x9d0 [ 659.745885][ T1702] ? crypto_aead_encrypt+0xf2/0x180 [ 659.751155][ T1702] ? tls_push_record+0x33f2/0x4f50 [ 659.756378][ T1702] ? bpf_exec_tx_verdict+0x14f7/0x2120 [ 659.761847][ T1702] ? tls_sw_sendmsg+0x1a13/0x2740 [ 659.766935][ T1702] ? inet6_sendmsg+0x2d8/0x2e0 [ 659.771707][ T1702] ? __sys_sendto+0x8e8/0xc50 [ 659.776396][ T1702] ? __se_sys_sendto+0x107/0x130 [ 659.781341][ T1702] ? __x64_sys_sendto+0x6e/0x90 [ 659.786201][ T1702] ? do_syscall_64+0xb8/0x160 [ 659.790887][ T1702] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 659.796962][ T1702] ? kmsan_get_metadata+0x11d/0x180 [ 659.802173][ T1702] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 659.808338][ T1702] ? kmsan_get_metadata+0x4f/0x180 [ 659.813456][ T1702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.819273][ T1702] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 659.825433][ T1702] ? scatterwalk_copychunks+0x7c9/0x800 [ 659.830995][ T1702] ? kmsan_get_metadata+0x4f/0x180 [ 659.836114][ T1702] __msan_chain_origin+0x50/0x90 [ 659.841064][ T1702] skcipher_walk_next+0x111f/0x2850 [ 659.846306][ T1702] skcipher_walk_done+0xb2b/0x1200 [ 659.851440][ T1702] crypto_ctr_crypt+0x6dd/0xb10 [ 659.856299][ T1702] ? kmsan_get_metadata+0x11d/0x180 [ 659.861520][ T1702] ? aesti_set_key+0xb0/0xb0 [ 659.866127][ T1702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.871948][ T1702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.877759][ T1702] ? crypto_rfc3686_create+0xda0/0xda0 [ 659.883232][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 659.888617][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 659.893661][ T1702] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 659.899072][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 659.904124][ T1702] tls_push_record+0x33f2/0x4f50 [ 659.909083][ T1702] ? gup_pgd_range+0x2b82/0x3030 [ 659.914072][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 659.919383][ T1702] ? kmsan_get_metadata+0x4f/0x180 [ 659.924505][ T1702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.930433][ T1702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.936319][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 659.941280][ T1702] ? udpv6_rcv+0x70/0x70 [ 659.945530][ T1702] ? tls_tx_records+0xb30/0xb30 [ 659.950399][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 659.955002][ T1702] ? inet6_ioctl+0x340/0x340 [ 659.959615][ T1702] __sys_sendto+0x8e8/0xc50 [ 659.964150][ T1702] ? kmsan_get_metadata+0x11d/0x180 [ 659.969371][ T1702] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 659.975185][ T1702] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 659.981260][ T1702] ? prepare_exit_to_usermode+0x1ca/0x520 [ 659.986994][ T1702] __se_sys_sendto+0x107/0x130 [ 659.991778][ T1702] __x64_sys_sendto+0x6e/0x90 [ 659.996462][ T1702] do_syscall_64+0xb8/0x160 [ 660.000977][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.006868][ T1702] RIP: 0033:0x45b399 [ 660.010763][ T1702] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.030373][ T1702] RSP: 002b:00007fe56fd77c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 660.038795][ T1702] RAX: ffffffffffffffda RBX: 00007fe56fd786d4 RCX: 000000000045b399 [ 660.046769][ T1702] RDX: fffffffffffffee0 RSI: 00000000200005c0 RDI: 0000000000000009 [ 660.054740][ T1702] RBP: 000000000075bf20 R08: 0000000000000000 R09: 00000000000000b6 [ 660.062709][ T1702] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 660.070678][ T1702] R13: 00000000000009d6 R14: 00000000004cb45d R15: 000000000075bf2c [ 660.078660][ T1702] Uninit was stored to memory at: [ 660.083690][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.089410][ T1702] __msan_chain_origin+0x50/0x90 [ 660.094350][ T1702] skcipher_walk_next+0x111f/0x2850 [ 660.099545][ T1702] skcipher_walk_done+0xb2b/0x1200 [ 660.104660][ T1702] crypto_ctr_crypt+0x6dd/0xb10 [ 660.109526][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.114907][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.119941][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.124992][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.129936][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.135233][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.140086][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.144680][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.149198][ T1702] __se_sys_sendto+0x107/0x130 [ 660.153978][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.158673][ T1702] do_syscall_64+0xb8/0x160 [ 660.163186][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.169101][ T1702] [ 660.171432][ T1702] Uninit was stored to memory at: [ 660.176725][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.182449][ T1702] __msan_chain_origin+0x50/0x90 [ 660.187391][ T1702] skcipher_walk_next+0x25e2/0x2850 [ 660.192599][ T1702] skcipher_walk_done+0xb2b/0x1200 [ 660.197719][ T1702] crypto_ctr_crypt+0x6dd/0xb10 [ 660.202579][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.207958][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.212993][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.218029][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.222976][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.228274][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.233130][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.237730][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.242243][ T1702] __se_sys_sendto+0x107/0x130 [ 660.247038][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.251733][ T1702] do_syscall_64+0xb8/0x160 [ 660.256245][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.262130][ T1702] [ 660.264449][ T1702] Uninit was stored to memory at: [ 660.269537][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.275264][ T1702] __msan_chain_origin+0x50/0x90 [ 660.280208][ T1702] skcipher_walk_next+0xa3a/0x2850 [ 660.285328][ T1702] skcipher_walk_done+0xb2b/0x1200 [ 660.290448][ T1702] crypto_ctr_crypt+0x6dd/0xb10 [ 660.295309][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.300796][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.305831][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.310872][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.315817][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.321113][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.325967][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.330629][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.335143][ T1702] __se_sys_sendto+0x107/0x130 [ 660.339908][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.344596][ T1702] do_syscall_64+0xb8/0x160 [ 660.349115][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.355097][ T1702] [ 660.357423][ T1702] Uninit was stored to memory at: [ 660.362455][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.368181][ T1702] __msan_chain_origin+0x50/0x90 [ 660.373131][ T1702] skcipher_walk_next+0x111f/0x2850 [ 660.378343][ T1702] skcipher_walk_done+0xb2b/0x1200 [ 660.383468][ T1702] crypto_ctr_crypt+0x6dd/0xb10 [ 660.388341][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.393719][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.398750][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.403782][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.408821][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.414112][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.418972][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.423601][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.428114][ T1702] __se_sys_sendto+0x107/0x130 [ 660.432889][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.437572][ T1702] do_syscall_64+0xb8/0x160 [ 660.442084][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.447974][ T1702] [ 660.450304][ T1702] Uninit was stored to memory at: [ 660.455336][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.461054][ T1702] __msan_chain_origin+0x50/0x90 [ 660.465999][ T1702] skcipher_walk_virt+0x986/0x9c0 [ 660.471034][ T1702] crypto_ctr_crypt+0x12b/0xb10 [ 660.475888][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.481266][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.486301][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.491437][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.496379][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.501682][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.506550][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.511168][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.515742][ T1702] __se_sys_sendto+0x107/0x130 [ 660.520524][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.525214][ T1702] do_syscall_64+0xb8/0x160 [ 660.529727][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.535612][ T1702] [ 660.537934][ T1702] Uninit was stored to memory at: [ 660.542959][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.548682][ T1702] __msan_chain_origin+0x50/0x90 [ 660.553630][ T1702] skcipher_walk_next+0xa3a/0x2850 [ 660.558749][ T1702] skcipher_walk_first+0x15d/0x6f0 [ 660.563872][ T1702] skcipher_walk_virt+0x5bb/0x9c0 [ 660.568903][ T1702] crypto_ctr_crypt+0x12b/0xb10 [ 660.573761][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.579140][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.584170][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.589200][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.594146][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.599445][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.604308][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.608909][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.613417][ T1702] __se_sys_sendto+0x107/0x130 [ 660.618188][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.622870][ T1702] do_syscall_64+0xb8/0x160 [ 660.627378][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.633264][ T1702] [ 660.635586][ T1702] Uninit was stored to memory at: [ 660.640618][ T1702] kmsan_internal_chain_origin+0xad/0x130 [ 660.646342][ T1702] __msan_chain_origin+0x50/0x90 [ 660.651278][ T1702] skcipher_walk_virt+0x881/0x9c0 [ 660.656304][ T1702] crypto_ctr_crypt+0x12b/0xb10 [ 660.661162][ T1702] crypto_skcipher_encrypt+0xce/0x140 [ 660.666538][ T1702] crypto_gcm_encrypt+0x4af/0x9d0 [ 660.671568][ T1702] crypto_aead_encrypt+0xf2/0x180 [ 660.676600][ T1702] tls_push_record+0x33f2/0x4f50 [ 660.681546][ T1702] bpf_exec_tx_verdict+0x14f7/0x2120 [ 660.686840][ T1702] tls_sw_sendmsg+0x1a13/0x2740 [ 660.691694][ T1702] inet6_sendmsg+0x2d8/0x2e0 [ 660.696292][ T1702] __sys_sendto+0x8e8/0xc50 [ 660.700800][ T1702] __se_sys_sendto+0x107/0x130 [ 660.705567][ T1702] __x64_sys_sendto+0x6e/0x90 [ 660.710249][ T1702] do_syscall_64+0xb8/0x160 [ 660.714758][ T1702] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 660.720641][ T1702] [ 660.722973][ T1702] Local variable ----walk@crypto_ctr_crypt created at: [ 660.729836][ T1702] crypto_ctr_crypt+0xf9/0xb10 [ 660.734604][ T1702] crypto_ctr_crypt+0xf9/0xb10 [ 666.651624][ T1837] not chained 20000 origins [ 666.656175][ T1837] CPU: 1 PID: 1837 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 666.664755][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.674804][ T1837] Call Trace: [ 666.678099][ T1837] dump_stack+0x1c9/0x220 [ 666.682438][ T1837] kmsan_internal_chain_origin+0x6f/0x130 [ 666.688161][ T1837] ? kmsan_internal_chain_origin+0xad/0x130 [ 666.694050][ T1837] ? __msan_chain_origin+0x50/0x90 [ 666.699162][ T1837] ? skcipher_walk_next+0x111f/0x2850 [ 666.704534][ T1837] ? skcipher_walk_done+0xb2b/0x1200 [ 666.709816][ T1837] ? crypto_ctr_crypt+0x6dd/0xb10 [ 666.714840][ T1837] ? crypto_skcipher_encrypt+0xce/0x140 [ 666.720384][ T1837] ? crypto_gcm_encrypt+0x4af/0x9d0 [ 666.725584][ T1837] ? crypto_aead_encrypt+0xf2/0x180 [ 666.730782][ T1837] ? tls_push_record+0x33f2/0x4f50 [ 666.735893][ T1837] ? bpf_exec_tx_verdict+0x14f7/0x2120 [ 666.741351][ T1837] ? tls_sw_sendmsg+0x1a13/0x2740 [ 666.746375][ T1837] ? inet6_sendmsg+0x2d8/0x2e0 [ 666.751138][ T1837] ? __sys_sendto+0x8e8/0xc50 [ 666.755812][ T1837] ? __se_sys_sendto+0x107/0x130 [ 666.760749][ T1837] ? __x64_sys_sendto+0x6e/0x90 [ 666.765599][ T1837] ? do_syscall_64+0xb8/0x160 [ 666.770395][ T1837] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 666.776474][ T1837] ? kmsan_get_metadata+0x11d/0x180 [ 666.781696][ T1837] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 666.787859][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 666.792970][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.798773][ T1837] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 666.804930][ T1837] ? scatterwalk_copychunks+0x7c9/0x800 [ 666.810486][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 666.815610][ T1837] __msan_chain_origin+0x50/0x90 [ 666.820558][ T1837] skcipher_walk_next+0xa3a/0x2850 [ 666.825672][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 666.830790][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.836602][ T1837] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 666.842767][ T1837] ? scatterwalk_copychunks+0x7c9/0x800 [ 666.848335][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 666.853463][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 666.858598][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 666.863453][ T1837] ? kmsan_get_metadata+0x11d/0x180 [ 666.868680][ T1837] ? aesti_set_key+0xb0/0xb0 [ 666.873287][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.879109][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.884919][ T1837] ? crypto_rfc3686_create+0xda0/0xda0 [ 666.890387][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 666.895780][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 666.900832][ T1837] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 666.906215][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 666.911257][ T1837] tls_push_record+0x33f2/0x4f50 [ 666.916205][ T1837] ? gup_pgd_range+0x2b82/0x3030 [ 666.921186][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 666.926487][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 666.931609][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.937430][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.943317][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 666.948211][ T1837] ? udpv6_rcv+0x70/0x70 [ 666.952462][ T1837] ? tls_tx_records+0xb30/0xb30 [ 666.957322][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 666.961917][ T1837] ? inet6_ioctl+0x340/0x340 [ 666.966512][ T1837] __sys_sendto+0x8e8/0xc50 [ 666.971133][ T1837] ? kmsan_get_metadata+0x11d/0x180 [ 666.976335][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 666.982143][ T1837] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 666.988218][ T1837] ? prepare_exit_to_usermode+0x1ca/0x520 [ 666.993946][ T1837] __se_sys_sendto+0x107/0x130 [ 666.998727][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.003404][ T1837] do_syscall_64+0xb8/0x160 [ 667.007913][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.013799][ T1837] RIP: 0033:0x45b399 [ 667.017698][ T1837] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.037298][ T1837] RSP: 002b:00007fe56fd14c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 667.045712][ T1837] RAX: ffffffffffffffda RBX: 00007fe56fd156d4 RCX: 000000000045b399 [ 667.053686][ T1837] RDX: fffffffffffffee0 RSI: 00000000200005c0 RDI: 0000000000000009 [ 667.061659][ T1837] RBP: 000000000075c118 R08: 0000000000000000 R09: 00000000000000b6 [ 667.069630][ T1837] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 667.077603][ T1837] R13: 00000000000009d6 R14: 00000000004cb45d R15: 000000000075c124 [ 667.085701][ T1837] Uninit was stored to memory at: [ 667.090735][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.096464][ T1837] __msan_chain_origin+0x50/0x90 [ 667.101402][ T1837] skcipher_walk_next+0x111f/0x2850 [ 667.106602][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 667.111712][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 667.116587][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.121960][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.126990][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.132025][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.136964][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.142253][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.147102][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.151697][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.156200][ T1837] __se_sys_sendto+0x107/0x130 [ 667.160961][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.165637][ T1837] do_syscall_64+0xb8/0x160 [ 667.170137][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.176020][ T1837] [ 667.178335][ T1837] Uninit was stored to memory at: [ 667.183356][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.189073][ T1837] __msan_chain_origin+0x50/0x90 [ 667.194013][ T1837] skcipher_walk_next+0x25e2/0x2850 [ 667.199208][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 667.204313][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 667.209167][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.214535][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.219569][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.224596][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.229541][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.234825][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.239674][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.244379][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.248881][ T1837] __se_sys_sendto+0x107/0x130 [ 667.253646][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.258321][ T1837] do_syscall_64+0xb8/0x160 [ 667.262829][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.268707][ T1837] [ 667.271030][ T1837] Uninit was stored to memory at: [ 667.276066][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.281793][ T1837] __msan_chain_origin+0x50/0x90 [ 667.286731][ T1837] skcipher_walk_next+0xa3a/0x2850 [ 667.291840][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 667.296949][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 667.301799][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.307166][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.312189][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.317217][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.322152][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.327436][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.332282][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.336872][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.341377][ T1837] __se_sys_sendto+0x107/0x130 [ 667.346138][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.350814][ T1837] do_syscall_64+0xb8/0x160 [ 667.355317][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.361192][ T1837] [ 667.363511][ T1837] Uninit was stored to memory at: [ 667.368535][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.374250][ T1837] __msan_chain_origin+0x50/0x90 [ 667.379198][ T1837] skcipher_walk_next+0x111f/0x2850 [ 667.384408][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 667.389520][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 667.394371][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.399737][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.404761][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.409788][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.414727][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.420011][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.424857][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.429445][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.433948][ T1837] __se_sys_sendto+0x107/0x130 [ 667.438713][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.443390][ T1837] do_syscall_64+0xb8/0x160 [ 667.447893][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.453770][ T1837] [ 667.456089][ T1837] Uninit was stored to memory at: [ 667.461112][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.466825][ T1837] __msan_chain_origin+0x50/0x90 [ 667.471764][ T1837] skcipher_walk_virt+0x986/0x9c0 [ 667.476798][ T1837] crypto_ctr_crypt+0x12b/0xb10 [ 667.481657][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.487041][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.492077][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.497101][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.502035][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.507321][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.512168][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.516762][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.521274][ T1837] __se_sys_sendto+0x107/0x130 [ 667.526036][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.530710][ T1837] do_syscall_64+0xb8/0x160 [ 667.535217][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.541106][ T1837] [ 667.543435][ T1837] Uninit was stored to memory at: [ 667.548475][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.554202][ T1837] __msan_chain_origin+0x50/0x90 [ 667.559143][ T1837] skcipher_walk_next+0xa3a/0x2850 [ 667.564264][ T1837] skcipher_walk_first+0x15d/0x6f0 [ 667.569383][ T1837] skcipher_walk_virt+0x5bb/0x9c0 [ 667.574409][ T1837] crypto_ctr_crypt+0x12b/0xb10 [ 667.579259][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.584630][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.589654][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.594676][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.599627][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.604918][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.609769][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.614365][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.618872][ T1837] __se_sys_sendto+0x107/0x130 [ 667.623640][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.628317][ T1837] do_syscall_64+0xb8/0x160 [ 667.632822][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.638700][ T1837] [ 667.641017][ T1837] Uninit was stored to memory at: [ 667.646044][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 667.651767][ T1837] __msan_chain_origin+0x50/0x90 [ 667.656791][ T1837] skcipher_walk_virt+0x881/0x9c0 [ 667.661810][ T1837] crypto_ctr_crypt+0x12b/0xb10 [ 667.666657][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 667.672024][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 667.677043][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 667.682064][ T1837] tls_push_record+0x33f2/0x4f50 [ 667.687019][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 667.692307][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 667.697158][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 667.701748][ T1837] __sys_sendto+0x8e8/0xc50 [ 667.706362][ T1837] __se_sys_sendto+0x107/0x130 [ 667.711130][ T1837] __x64_sys_sendto+0x6e/0x90 [ 667.715818][ T1837] do_syscall_64+0xb8/0x160 [ 667.720341][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 667.726221][ T1837] [ 667.728544][ T1837] Local variable ----walk@crypto_ctr_crypt created at: [ 667.735390][ T1837] crypto_ctr_crypt+0xf9/0xb10 [ 667.740153][ T1837] crypto_ctr_crypt+0xf9/0xb10 [ 673.645082][ T1837] not chained 30000 origins [ 673.649628][ T1837] CPU: 1 PID: 1837 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 673.658207][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.668257][ T1837] Call Trace: [ 673.671553][ T1837] dump_stack+0x1c9/0x220 [ 673.675893][ T1837] kmsan_internal_chain_origin+0x6f/0x130 [ 673.681610][ T1837] ? kmsan_internal_chain_origin+0xad/0x130 [ 673.687497][ T1837] ? __msan_chain_origin+0x50/0x90 [ 673.692610][ T1837] ? skcipher_walk_next+0x111f/0x2850 [ 673.697988][ T1837] ? skcipher_walk_done+0xb2b/0x1200 [ 673.703272][ T1837] ? crypto_ctr_crypt+0x6dd/0xb10 [ 673.708293][ T1837] ? crypto_skcipher_encrypt+0xce/0x140 [ 673.713836][ T1837] ? crypto_gcm_encrypt+0x4af/0x9d0 [ 673.719034][ T1837] ? crypto_aead_encrypt+0xf2/0x180 [ 673.724232][ T1837] ? tls_push_record+0x33f2/0x4f50 [ 673.729339][ T1837] ? bpf_exec_tx_verdict+0x14f7/0x2120 [ 673.734792][ T1837] ? tls_sw_sendmsg+0x1a13/0x2740 [ 673.739812][ T1837] ? inet6_sendmsg+0x2d8/0x2e0 [ 673.744591][ T1837] ? __sys_sendto+0x8e8/0xc50 [ 673.749281][ T1837] ? __se_sys_sendto+0x107/0x130 [ 673.754232][ T1837] ? __x64_sys_sendto+0x6e/0x90 [ 673.759087][ T1837] ? do_syscall_64+0xb8/0x160 [ 673.763766][ T1837] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 673.769839][ T1837] ? kmsan_get_metadata+0x11d/0x180 [ 673.775047][ T1837] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 673.781205][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 673.786315][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.792121][ T1837] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 673.798278][ T1837] ? scatterwalk_copychunks+0x7c9/0x800 [ 673.803833][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 673.808944][ T1837] __msan_chain_origin+0x50/0x90 [ 673.813881][ T1837] skcipher_walk_next+0x25e2/0x2850 [ 673.819109][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 673.824239][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 673.829091][ T1837] ? kmsan_get_metadata+0x11d/0x180 [ 673.834299][ T1837] ? aesti_set_key+0xb0/0xb0 [ 673.838904][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.844716][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.850520][ T1837] ? crypto_rfc3686_create+0xda0/0xda0 [ 673.855993][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 673.861483][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 673.866524][ T1837] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 673.871903][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 673.876935][ T1837] tls_push_record+0x33f2/0x4f50 [ 673.881875][ T1837] ? gup_pgd_range+0x2b82/0x3030 [ 673.886857][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 673.892153][ T1837] ? kmsan_get_metadata+0x4f/0x180 [ 673.897267][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.903080][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.908961][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 673.913860][ T1837] ? udpv6_rcv+0x70/0x70 [ 673.918099][ T1837] ? tls_tx_records+0xb30/0xb30 [ 673.922956][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 673.927554][ T1837] ? inet6_ioctl+0x340/0x340 [ 673.932146][ T1837] __sys_sendto+0x8e8/0xc50 [ 673.936667][ T1837] ? kmsan_get_metadata+0x11d/0x180 [ 673.941864][ T1837] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 673.947671][ T1837] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 673.953734][ T1837] ? prepare_exit_to_usermode+0x1ca/0x520 [ 673.959470][ T1837] __se_sys_sendto+0x107/0x130 [ 673.964259][ T1837] __x64_sys_sendto+0x6e/0x90 [ 673.968941][ T1837] do_syscall_64+0xb8/0x160 [ 673.973453][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 673.979339][ T1837] RIP: 0033:0x45b399 [ 673.983244][ T1837] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.002848][ T1837] RSP: 002b:00007fe56fd14c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 674.011262][ T1837] RAX: ffffffffffffffda RBX: 00007fe56fd156d4 RCX: 000000000045b399 [ 674.019230][ T1837] RDX: fffffffffffffee0 RSI: 00000000200005c0 RDI: 0000000000000009 [ 674.027198][ T1837] RBP: 000000000075c118 R08: 0000000000000000 R09: 00000000000000b6 [ 674.035168][ T1837] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 674.043139][ T1837] R13: 00000000000009d6 R14: 00000000004cb45d R15: 000000000075c124 [ 674.051125][ T1837] Uninit was stored to memory at: [ 674.056159][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.061878][ T1837] __msan_chain_origin+0x50/0x90 [ 674.066812][ T1837] skcipher_walk_next+0x111f/0x2850 [ 674.072011][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 674.077120][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 674.081969][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.087344][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.092369][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.097390][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.102327][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.107615][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.112465][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.117066][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.121568][ T1837] __se_sys_sendto+0x107/0x130 [ 674.126326][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.130998][ T1837] do_syscall_64+0xb8/0x160 [ 674.135503][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.141387][ T1837] [ 674.143705][ T1837] Uninit was stored to memory at: [ 674.148727][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.154455][ T1837] __msan_chain_origin+0x50/0x90 [ 674.159391][ T1837] skcipher_walk_next+0x25e2/0x2850 [ 674.164585][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 674.169698][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 674.174546][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.179915][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.185388][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.191492][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.196439][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.201732][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.206582][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.211176][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.215679][ T1837] __se_sys_sendto+0x107/0x130 [ 674.220443][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.225118][ T1837] do_syscall_64+0xb8/0x160 [ 674.229618][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.235588][ T1837] [ 674.237909][ T1837] Uninit was stored to memory at: [ 674.242932][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.248658][ T1837] __msan_chain_origin+0x50/0x90 [ 674.253599][ T1837] skcipher_walk_next+0xa3a/0x2850 [ 674.258708][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 674.263825][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 674.268675][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.274045][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.279069][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.284101][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.289044][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.294330][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.299183][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.303773][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.308276][ T1837] __se_sys_sendto+0x107/0x130 [ 674.313054][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.317729][ T1837] do_syscall_64+0xb8/0x160 [ 674.322230][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.328111][ T1837] [ 674.330428][ T1837] Uninit was stored to memory at: [ 674.335447][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.341165][ T1837] __msan_chain_origin+0x50/0x90 [ 674.346103][ T1837] skcipher_walk_next+0x111f/0x2850 [ 674.351294][ T1837] skcipher_walk_done+0xb2b/0x1200 [ 674.356401][ T1837] crypto_ctr_crypt+0x6dd/0xb10 [ 674.361250][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.366618][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.371639][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.376663][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.381596][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.386878][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.391724][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.396313][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.400812][ T1837] __se_sys_sendto+0x107/0x130 [ 674.405574][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.410247][ T1837] do_syscall_64+0xb8/0x160 [ 674.414762][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.420646][ T1837] [ 674.422968][ T1837] Uninit was stored to memory at: [ 674.427991][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.433707][ T1837] __msan_chain_origin+0x50/0x90 [ 674.438644][ T1837] skcipher_walk_virt+0x986/0x9c0 [ 674.443668][ T1837] crypto_ctr_crypt+0x12b/0xb10 [ 674.448519][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.453888][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.459397][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.464423][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.469364][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.474647][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.479494][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.484082][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.488598][ T1837] __se_sys_sendto+0x107/0x130 [ 674.493369][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.498048][ T1837] do_syscall_64+0xb8/0x160 [ 674.502552][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.508432][ T1837] [ 674.510754][ T1837] Uninit was stored to memory at: [ 674.515775][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.521490][ T1837] __msan_chain_origin+0x50/0x90 [ 674.526427][ T1837] skcipher_walk_next+0xa3a/0x2850 [ 674.531549][ T1837] skcipher_walk_first+0x15d/0x6f0 [ 674.536674][ T1837] skcipher_walk_virt+0x5bb/0x9c0 [ 674.541736][ T1837] crypto_ctr_crypt+0x12b/0xb10 [ 674.546599][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.551973][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.556998][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.562020][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.566957][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.572244][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.577091][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.581679][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.586715][ T1837] __se_sys_sendto+0x107/0x130 [ 674.591475][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.596159][ T1837] do_syscall_64+0xb8/0x160 [ 674.600660][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.606536][ T1837] [ 674.608854][ T1837] Uninit was stored to memory at: [ 674.613879][ T1837] kmsan_internal_chain_origin+0xad/0x130 [ 674.619598][ T1837] __msan_chain_origin+0x50/0x90 [ 674.624534][ T1837] skcipher_walk_virt+0x881/0x9c0 [ 674.629574][ T1837] crypto_ctr_crypt+0x12b/0xb10 [ 674.634425][ T1837] crypto_skcipher_encrypt+0xce/0x140 [ 674.639798][ T1837] crypto_gcm_encrypt+0x4af/0x9d0 [ 674.644825][ T1837] crypto_aead_encrypt+0xf2/0x180 [ 674.649849][ T1837] tls_push_record+0x33f2/0x4f50 [ 674.654784][ T1837] bpf_exec_tx_verdict+0x14f7/0x2120 [ 674.660066][ T1837] tls_sw_sendmsg+0x1a13/0x2740 [ 674.664913][ T1837] inet6_sendmsg+0x2d8/0x2e0 [ 674.669500][ T1837] __sys_sendto+0x8e8/0xc50 [ 674.674000][ T1837] __se_sys_sendto+0x107/0x130 [ 674.678763][ T1837] __x64_sys_sendto+0x6e/0x90 [ 674.683436][ T1837] do_syscall_64+0xb8/0x160 [ 674.688202][ T1837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 674.694083][ T1837] [ 674.696403][ T1837] Local variable ----walk@crypto_ctr_crypt created at: [ 674.703249][ T1837] crypto_ctr_crypt+0xf9/0xb10 [ 674.708008][ T1837] crypto_ctr_crypt+0xf9/0xb10 [ 681.744216][T12813] ===================================================== [ 681.751218][T12813] BUG: KMSAN: use-after-free in cryptd_hash_init+0x431/0x4f0 [ 681.758585][T12813] CPU: 0 PID: 12813 Comm: kworker/0:4 Not tainted 5.5.0-rc5-syzkaller #0 [ 681.766984][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.777049][T12813] Workqueue: cryptd cryptd_queue_worker [ 681.782590][T12813] Call Trace: [ 681.785885][T12813] dump_stack+0x1c9/0x220 [ 681.790217][T12813] kmsan_report+0xf7/0x1e0 [ 681.794658][T12813] __msan_warning+0x58/0xa0 [ 681.799168][T12813] cryptd_hash_init+0x431/0x4f0 [ 681.804039][T12813] ? cryptd_hash_digest_enqueue+0x1c0/0x1c0 [ 681.809931][T12813] cryptd_queue_worker+0x174/0x2e0 [ 681.815044][T12813] ? cryptd_aead_decrypt+0x3e0/0x3e0 [ 681.820329][T12813] process_one_work+0x1552/0x1ef0 [ 681.825374][T12813] worker_thread+0xef6/0x2450 [ 681.830126][T12813] kthread+0x4b5/0x4f0 [ 681.834194][T12813] ? process_one_work+0x1ef0/0x1ef0 [ 681.839396][T12813] ? kthread_blkcg+0xf0/0xf0 [ 681.844033][T12813] ret_from_fork+0x35/0x40 [ 681.848483][T12813] [ 681.850803][T12813] Uninit was created at: [ 681.855045][T12813] kmsan_internal_poison_shadow+0x66/0xd0 [ 681.860761][T12813] kmsan_slab_free+0x6e/0xb0 [ 681.865350][T12813] kfree+0x565/0x30a0 [ 681.869337][T12813] bpf_exec_tx_verdict+0x1723/0x2120 [ 681.874620][T12813] tls_sw_sendmsg+0x1a13/0x2740 [ 681.879477][T12813] inet6_sendmsg+0x2d8/0x2e0 [ 681.884074][T12813] __sys_sendto+0x8e8/0xc50 [ 681.888668][T12813] __se_sys_sendto+0x107/0x130 [ 681.893530][T12813] __x64_sys_sendto+0x6e/0x90 [ 681.898204][T12813] do_syscall_64+0xb8/0x160 [ 681.902711][T12813] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 681.908592][T12813] ===================================================== [ 681.915532][T12813] Disabling lock debugging due to kernel taint [ 681.921675][T12813] Kernel panic - not syncing: panic_on_warn set ... [ 681.928267][T12813] CPU: 0 PID: 12813 Comm: kworker/0:4 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 681.938177][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.948247][T12813] Workqueue: cryptd cryptd_queue_worker [ 681.953789][T12813] Call Trace: [ 681.957080][T12813] dump_stack+0x1c9/0x220 [ 681.961413][T12813] panic+0x3d5/0xc3e [ 681.965335][T12813] kmsan_report+0x1df/0x1e0 [ 681.969860][T12813] __msan_warning+0x58/0xa0 [ 681.974372][T12813] cryptd_hash_init+0x431/0x4f0 [ 681.979235][T12813] ? cryptd_hash_digest_enqueue+0x1c0/0x1c0 [ 681.985127][T12813] cryptd_queue_worker+0x174/0x2e0 [ 681.990246][T12813] ? cryptd_aead_decrypt+0x3e0/0x3e0 [ 681.995537][T12813] process_one_work+0x1552/0x1ef0 [ 682.000581][T12813] worker_thread+0xef6/0x2450 [ 682.005282][T12813] kthread+0x4b5/0x4f0 [ 682.009351][T12813] ? process_one_work+0x1ef0/0x1ef0 [ 682.014555][T12813] ? kthread_blkcg+0xf0/0xf0 [ 682.019148][T12813] ret_from_fork+0x35/0x40 [ 682.024773][T12813] Kernel Offset: 0x1b400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 682.036387][T12813] Rebooting in 86400 seconds..