Warning: Permanently added '10.128.0.186' (ECDSA) to the list of known hosts. 2021/05/04 01:48:19 fuzzer started 2021/05/04 01:48:19 dialing manager at 10.128.0.163:40399 2021/05/04 01:48:19 syscalls: 2338 2021/05/04 01:48:19 code coverage: enabled 2021/05/04 01:48:19 comparison tracing: enabled 2021/05/04 01:48:19 extra coverage: enabled 2021/05/04 01:48:19 setuid sandbox: enabled 2021/05/04 01:48:19 namespace sandbox: enabled 2021/05/04 01:48:19 Android sandbox: enabled 2021/05/04 01:48:19 fault injection: enabled 2021/05/04 01:48:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/04 01:48:19 net packet injection: enabled 2021/05/04 01:48:19 net device setup: enabled 2021/05/04 01:48:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/04 01:48:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/04 01:48:19 USB emulation: enabled 2021/05/04 01:48:19 hci packet injection: /dev/vhci does not exist 2021/05/04 01:48:19 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/05/04 01:48:19 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/05/04 01:48:19 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/04 01:48:19 fetching corpus: 50, signal 23651/27402 (executing program) 2021/05/04 01:48:19 fetching corpus: 100, signal 35702/41184 (executing program) 2021/05/04 01:48:19 fetching corpus: 150, signal 46242/53356 (executing program) 2021/05/04 01:48:19 fetching corpus: 200, signal 57069/65656 (executing program) 2021/05/04 01:48:19 fetching corpus: 250, signal 62715/72858 (executing program) 2021/05/04 01:48:19 fetching corpus: 300, signal 70651/82213 (executing program) 2021/05/04 01:48:19 fetching corpus: 350, signal 76633/89633 (executing program) 2021/05/04 01:48:19 fetching corpus: 400, signal 81389/95837 (executing program) 2021/05/04 01:48:19 fetching corpus: 450, signal 87881/103672 (executing program) 2021/05/04 01:48:19 fetching corpus: 500, signal 92789/109909 (executing program) 2021/05/04 01:48:19 fetching corpus: 550, signal 97462/115895 (executing program) 2021/05/04 01:48:20 fetching corpus: 600, signal 102226/121912 (executing program) 2021/05/04 01:48:20 fetching corpus: 649, signal 107768/128588 (executing program) 2021/05/04 01:48:20 fetching corpus: 699, signal 111773/133874 (executing program) 2021/05/04 01:48:20 fetching corpus: 749, signal 115750/139057 (executing program) 2021/05/04 01:48:20 fetching corpus: 799, signal 120155/144556 (executing program) 2021/05/04 01:48:20 fetching corpus: 849, signal 124301/149777 (executing program) 2021/05/04 01:48:20 fetching corpus: 899, signal 127997/154513 (executing program) 2021/05/04 01:48:20 fetching corpus: 949, signal 129926/157673 (executing program) 2021/05/04 01:48:20 fetching corpus: 999, signal 133459/162240 (executing program) 2021/05/04 01:48:20 fetching corpus: 1049, signal 135981/165863 (executing program) 2021/05/04 01:48:20 fetching corpus: 1099, signal 138710/169624 (executing program) 2021/05/04 01:48:20 fetching corpus: 1149, signal 141021/173016 (executing program) 2021/05/04 01:48:20 fetching corpus: 1199, signal 144396/177322 (executing program) 2021/05/04 01:48:20 fetching corpus: 1249, signal 146622/180578 (executing program) 2021/05/04 01:48:20 fetching corpus: 1299, signal 148595/183609 (executing program) 2021/05/04 01:48:20 fetching corpus: 1348, signal 149968/186109 (executing program) 2021/05/04 01:48:21 fetching corpus: 1398, signal 152108/189226 (executing program) 2021/05/04 01:48:21 fetching corpus: 1448, signal 154471/192519 (executing program) 2021/05/04 01:48:21 fetching corpus: 1497, signal 156152/195223 (executing program) 2021/05/04 01:48:21 fetching corpus: 1546, signal 158507/198486 (executing program) 2021/05/04 01:48:21 fetching corpus: 1596, signal 160978/201838 (executing program) 2021/05/04 01:48:21 fetching corpus: 1646, signal 163558/205208 (executing program) 2021/05/04 01:48:21 fetching corpus: 1696, signal 165210/207774 (executing program) 2021/05/04 01:48:21 fetching corpus: 1746, signal 167663/211045 (executing program) 2021/05/04 01:48:21 fetching corpus: 1796, signal 169448/213662 (executing program) 2021/05/04 01:48:21 fetching corpus: 1845, signal 171883/216826 (executing program) 2021/05/04 01:48:21 fetching corpus: 1895, signal 173299/219169 (executing program) 2021/05/04 01:48:21 fetching corpus: 1945, signal 174992/221704 (executing program) 2021/05/04 01:48:21 fetching corpus: 1995, signal 177082/224536 (executing program) 2021/05/04 01:48:21 fetching corpus: 2044, signal 179466/227613 (executing program) 2021/05/04 01:48:21 fetching corpus: 2094, signal 181219/230149 (executing program) 2021/05/04 01:48:21 fetching corpus: 2144, signal 182884/232572 (executing program) 2021/05/04 01:48:21 fetching corpus: 2194, signal 184065/234664 (executing program) 2021/05/04 01:48:22 fetching corpus: 2244, signal 186231/237491 (executing program) 2021/05/04 01:48:22 fetching corpus: 2294, signal 187560/239606 (executing program) 2021/05/04 01:48:22 fetching corpus: 2344, signal 189275/242079 (executing program) 2021/05/04 01:48:22 fetching corpus: 2394, signal 191073/244571 (executing program) 2021/05/04 01:48:22 fetching corpus: 2444, signal 192282/246650 (executing program) 2021/05/04 01:48:22 fetching corpus: 2494, signal 193912/248973 (executing program) 2021/05/04 01:48:22 fetching corpus: 2543, signal 195258/251053 (executing program) 2021/05/04 01:48:22 fetching corpus: 2593, signal 196606/253168 (executing program) 2021/05/04 01:48:22 fetching corpus: 2643, signal 198358/255533 (executing program) 2021/05/04 01:48:22 fetching corpus: 2693, signal 199831/257697 (executing program) 2021/05/04 01:48:22 fetching corpus: 2743, signal 201447/259974 (executing program) 2021/05/04 01:48:22 fetching corpus: 2793, signal 202657/261888 (executing program) 2021/05/04 01:48:22 fetching corpus: 2843, signal 204008/263907 (executing program) 2021/05/04 01:48:22 fetching corpus: 2893, signal 206006/266313 (executing program) 2021/05/04 01:48:22 fetching corpus: 2943, signal 207435/268316 (executing program) 2021/05/04 01:48:22 fetching corpus: 2993, signal 208654/270190 (executing program) 2021/05/04 01:48:22 fetching corpus: 3043, signal 209830/272026 (executing program) 2021/05/04 01:48:23 fetching corpus: 3093, signal 211261/274046 (executing program) 2021/05/04 01:48:23 fetching corpus: 3143, signal 212624/276012 (executing program) 2021/05/04 01:48:23 fetching corpus: 3193, signal 213817/277810 (executing program) 2021/05/04 01:48:23 fetching corpus: 3242, signal 215234/279734 (executing program) 2021/05/04 01:48:23 fetching corpus: 3292, signal 217433/282209 (executing program) 2021/05/04 01:48:23 fetching corpus: 3342, signal 218643/284000 (executing program) 2021/05/04 01:48:23 fetching corpus: 3391, signal 219325/285416 (executing program) 2021/05/04 01:48:23 fetching corpus: 3441, signal 220598/287237 (executing program) 2021/05/04 01:48:23 fetching corpus: 3491, signal 221800/288967 (executing program) 2021/05/04 01:48:23 fetching corpus: 3541, signal 222658/290444 (executing program) 2021/05/04 01:48:23 fetching corpus: 3589, signal 223739/292082 (executing program) 2021/05/04 01:48:23 fetching corpus: 3638, signal 225019/293841 (executing program) 2021/05/04 01:48:23 fetching corpus: 3688, signal 225973/295358 (executing program) 2021/05/04 01:48:23 fetching corpus: 3738, signal 227114/297005 (executing program) 2021/05/04 01:48:24 fetching corpus: 3788, signal 228308/298692 (executing program) 2021/05/04 01:48:24 fetching corpus: 3838, signal 229284/300233 (executing program) 2021/05/04 01:48:24 fetching corpus: 3888, signal 230796/302064 (executing program) 2021/05/04 01:48:24 fetching corpus: 3938, signal 231618/303492 (executing program) 2021/05/04 01:48:24 fetching corpus: 3986, signal 232633/305026 (executing program) 2021/05/04 01:48:24 fetching corpus: 4036, signal 233986/306774 (executing program) 2021/05/04 01:48:24 fetching corpus: 4086, signal 235161/308363 (executing program) 2021/05/04 01:48:24 fetching corpus: 4135, signal 236099/309758 (executing program) 2021/05/04 01:48:24 fetching corpus: 4185, signal 236877/311095 (executing program) 2021/05/04 01:48:24 fetching corpus: 4234, signal 237518/312367 (executing program) 2021/05/04 01:48:24 fetching corpus: 4283, signal 238623/313856 (executing program) 2021/05/04 01:48:24 fetching corpus: 4333, signal 239673/315327 (executing program) 2021/05/04 01:48:24 fetching corpus: 4383, signal 240523/316637 (executing program) 2021/05/04 01:48:24 fetching corpus: 4433, signal 241286/317926 (executing program) 2021/05/04 01:48:24 fetching corpus: 4483, signal 242272/319328 (executing program) 2021/05/04 01:48:24 fetching corpus: 4533, signal 243643/320928 (executing program) 2021/05/04 01:48:24 fetching corpus: 4583, signal 245123/322612 (executing program) 2021/05/04 01:48:25 fetching corpus: 4633, signal 246464/324251 (executing program) 2021/05/04 01:48:25 fetching corpus: 4683, signal 247741/325773 (executing program) 2021/05/04 01:48:25 fetching corpus: 4733, signal 248940/327238 (executing program) 2021/05/04 01:48:25 fetching corpus: 4783, signal 249730/328485 (executing program) 2021/05/04 01:48:25 fetching corpus: 4833, signal 250680/329739 (executing program) 2021/05/04 01:48:25 fetching corpus: 4883, signal 251719/331153 (executing program) 2021/05/04 01:48:25 fetching corpus: 4933, signal 252890/332560 (executing program) 2021/05/04 01:48:25 fetching corpus: 4982, signal 253790/333831 (executing program) 2021/05/04 01:48:25 fetching corpus: 5032, signal 255022/335262 (executing program) 2021/05/04 01:48:25 fetching corpus: 5082, signal 255817/336421 (executing program) 2021/05/04 01:48:25 fetching corpus: 5132, signal 256909/337695 (executing program) 2021/05/04 01:48:25 fetching corpus: 5182, signal 257769/338896 (executing program) 2021/05/04 01:48:25 fetching corpus: 5232, signal 258448/340034 (executing program) 2021/05/04 01:48:25 fetching corpus: 5281, signal 259070/341131 (executing program) 2021/05/04 01:48:25 fetching corpus: 5331, signal 259886/342344 (executing program) 2021/05/04 01:48:26 fetching corpus: 5381, signal 261075/343681 (executing program) 2021/05/04 01:48:26 fetching corpus: 5431, signal 262454/345136 (executing program) 2021/05/04 01:48:26 fetching corpus: 5481, signal 263136/346199 (executing program) 2021/05/04 01:48:26 fetching corpus: 5530, signal 263944/347300 (executing program) 2021/05/04 01:48:26 fetching corpus: 5580, signal 264591/348349 (executing program) 2021/05/04 01:48:26 fetching corpus: 5630, signal 265413/349464 (executing program) 2021/05/04 01:48:26 fetching corpus: 5679, signal 266222/350537 (executing program) 2021/05/04 01:48:26 fetching corpus: 5729, signal 267038/351622 (executing program) 2021/05/04 01:48:26 fetching corpus: 5778, signal 267633/352595 (executing program) 2021/05/04 01:48:26 fetching corpus: 5828, signal 268527/353683 (executing program) 2021/05/04 01:48:26 fetching corpus: 5878, signal 269489/354756 (executing program) 2021/05/04 01:48:26 fetching corpus: 5928, signal 270329/355795 (executing program) 2021/05/04 01:48:26 fetching corpus: 5978, signal 270772/356696 (executing program) 2021/05/04 01:48:26 fetching corpus: 6028, signal 271574/357760 (executing program) 2021/05/04 01:48:26 fetching corpus: 6078, signal 272130/358695 (executing program) 2021/05/04 01:48:27 fetching corpus: 6128, signal 272943/359726 (executing program) 2021/05/04 01:48:27 fetching corpus: 6178, signal 273842/360762 (executing program) 2021/05/04 01:48:27 fetching corpus: 6227, signal 274457/361694 (executing program) 2021/05/04 01:48:27 fetching corpus: 6276, signal 275227/362681 (executing program) 2021/05/04 01:48:27 fetching corpus: 6326, signal 276235/363761 (executing program) 2021/05/04 01:48:27 fetching corpus: 6375, signal 277182/364823 (executing program) 2021/05/04 01:48:27 fetching corpus: 6425, signal 277849/365764 (executing program) 2021/05/04 01:48:27 fetching corpus: 6474, signal 278777/366794 (executing program) 2021/05/04 01:48:27 fetching corpus: 6522, signal 279294/367600 (executing program) 2021/05/04 01:48:27 fetching corpus: 6572, signal 279976/368499 (executing program) 2021/05/04 01:48:27 fetching corpus: 6620, signal 280597/369443 (executing program) 2021/05/04 01:48:27 fetching corpus: 6670, signal 281402/370400 (executing program) 2021/05/04 01:48:27 fetching corpus: 6719, signal 282291/371327 (executing program) 2021/05/04 01:48:27 fetching corpus: 6768, signal 282766/372130 (executing program) 2021/05/04 01:48:27 fetching corpus: 6817, signal 283331/372986 (executing program) 2021/05/04 01:48:27 fetching corpus: 6866, signal 284031/373866 (executing program) 2021/05/04 01:48:27 fetching corpus: 6915, signal 284716/374745 (executing program) 2021/05/04 01:48:28 fetching corpus: 6963, signal 285292/375590 (executing program) 2021/05/04 01:48:28 fetching corpus: 7013, signal 285901/376373 (executing program) 2021/05/04 01:48:28 fetching corpus: 7063, signal 286717/377240 (executing program) 2021/05/04 01:48:28 fetching corpus: 7113, signal 287283/378035 (executing program) 2021/05/04 01:48:28 fetching corpus: 7162, signal 287949/378864 (executing program) 2021/05/04 01:48:28 fetching corpus: 7212, signal 288745/379716 (executing program) 2021/05/04 01:48:28 fetching corpus: 7262, signal 289644/380555 (executing program) 2021/05/04 01:48:28 fetching corpus: 7312, signal 290386/381359 (executing program) 2021/05/04 01:48:28 fetching corpus: 7362, signal 291007/382120 (executing program) 2021/05/04 01:48:28 fetching corpus: 7412, signal 291597/382884 (executing program) 2021/05/04 01:48:28 fetching corpus: 7462, signal 292553/383753 (executing program) 2021/05/04 01:48:28 fetching corpus: 7512, signal 293322/384591 (executing program) 2021/05/04 01:48:28 fetching corpus: 7562, signal 294085/385425 (executing program) 2021/05/04 01:48:28 fetching corpus: 7611, signal 294991/386293 (executing program) 2021/05/04 01:48:28 fetching corpus: 7661, signal 295685/387093 (executing program) 2021/05/04 01:48:29 fetching corpus: 7711, signal 296347/387855 (executing program) 2021/05/04 01:48:29 fetching corpus: 7760, signal 297021/388610 (executing program) 2021/05/04 01:48:29 fetching corpus: 7810, signal 297561/389323 (executing program) 2021/05/04 01:48:29 fetching corpus: 7860, signal 298083/390069 (executing program) 2021/05/04 01:48:29 fetching corpus: 7910, signal 298614/390757 (executing program) 2021/05/04 01:48:29 fetching corpus: 7960, signal 299284/391464 (executing program) 2021/05/04 01:48:29 fetching corpus: 8010, signal 299743/392099 (executing program) 2021/05/04 01:48:29 fetching corpus: 8060, signal 300444/392856 (executing program) 2021/05/04 01:48:29 fetching corpus: 8110, signal 301049/393542 (executing program) 2021/05/04 01:48:29 fetching corpus: 8160, signal 301863/394261 (executing program) 2021/05/04 01:48:29 fetching corpus: 8210, signal 302575/394971 (executing program) 2021/05/04 01:48:29 fetching corpus: 8260, signal 303252/395642 (executing program) 2021/05/04 01:48:29 fetching corpus: 8310, signal 303922/396339 (executing program) 2021/05/04 01:48:29 fetching corpus: 8360, signal 304622/397021 (executing program) 2021/05/04 01:48:29 fetching corpus: 8410, signal 305054/397631 (executing program) 2021/05/04 01:48:29 fetching corpus: 8460, signal 305464/398224 (executing program) 2021/05/04 01:48:30 fetching corpus: 8510, signal 306083/398879 (executing program) 2021/05/04 01:48:30 fetching corpus: 8560, signal 306848/399570 (executing program) 2021/05/04 01:48:30 fetching corpus: 8609, signal 307219/400169 (executing program) 2021/05/04 01:48:30 fetching corpus: 8659, signal 307739/400785 (executing program) 2021/05/04 01:48:30 fetching corpus: 8709, signal 308290/401390 (executing program) 2021/05/04 01:48:30 fetching corpus: 8758, signal 308867/401968 (executing program) 2021/05/04 01:48:30 fetching corpus: 8808, signal 309335/402567 (executing program) 2021/05/04 01:48:30 fetching corpus: 8857, signal 310095/403200 (executing program) 2021/05/04 01:48:30 fetching corpus: 8905, signal 310527/403803 (executing program) 2021/05/04 01:48:30 fetching corpus: 8955, signal 311229/404389 (executing program) 2021/05/04 01:48:30 fetching corpus: 9005, signal 311776/404998 (executing program) 2021/05/04 01:48:30 fetching corpus: 9055, signal 312335/405570 (executing program) 2021/05/04 01:48:30 fetching corpus: 9104, signal 312908/406108 (executing program) 2021/05/04 01:48:30 fetching corpus: 9153, signal 313352/406675 (executing program) 2021/05/04 01:48:30 fetching corpus: 9201, signal 313916/407201 (executing program) 2021/05/04 01:48:31 fetching corpus: 9250, signal 314594/407778 (executing program) 2021/05/04 01:48:31 fetching corpus: 9299, signal 315411/408384 (executing program) 2021/05/04 01:48:31 fetching corpus: 9349, signal 315778/408941 (executing program) 2021/05/04 01:48:31 fetching corpus: 9398, signal 316313/409512 (executing program) 2021/05/04 01:48:31 fetching corpus: 9448, signal 316901/410050 (executing program) 2021/05/04 01:48:31 fetching corpus: 9498, signal 317311/410578 (executing program) 2021/05/04 01:48:31 fetching corpus: 9547, signal 317805/411128 (executing program) 2021/05/04 01:48:31 fetching corpus: 9596, signal 318243/411667 (executing program) 2021/05/04 01:48:31 fetching corpus: 9646, signal 318782/412218 (executing program) 2021/05/04 01:48:31 fetching corpus: 9695, signal 319322/412731 (executing program) 2021/05/04 01:48:31 fetching corpus: 9745, signal 319712/413219 (executing program) 2021/05/04 01:48:31 fetching corpus: 9795, signal 320433/413763 (executing program) 2021/05/04 01:48:31 fetching corpus: 9845, signal 320954/414261 (executing program) 2021/05/04 01:48:31 fetching corpus: 9895, signal 321498/414763 (executing program) 2021/05/04 01:48:31 fetching corpus: 9945, signal 322152/415288 (executing program) 2021/05/04 01:48:31 fetching corpus: 9994, signal 322934/415780 (executing program) 2021/05/04 01:48:31 fetching corpus: 10043, signal 323497/416277 (executing program) 2021/05/04 01:48:31 fetching corpus: 10093, signal 323885/416781 (executing program) 2021/05/04 01:48:32 fetching corpus: 10143, signal 324440/417265 (executing program) 2021/05/04 01:48:32 fetching corpus: 10193, signal 325594/417748 (executing program) 2021/05/04 01:48:32 fetching corpus: 10243, signal 326166/418191 (executing program) 2021/05/04 01:48:32 fetching corpus: 10293, signal 326773/418656 (executing program) 2021/05/04 01:48:32 fetching corpus: 10343, signal 327255/419128 (executing program) 2021/05/04 01:48:32 fetching corpus: 10392, signal 327769/419395 (executing program) 2021/05/04 01:48:32 fetching corpus: 10442, signal 328139/419395 (executing program) 2021/05/04 01:48:32 fetching corpus: 10491, signal 329004/419400 (executing program) 2021/05/04 01:48:32 fetching corpus: 10541, signal 329391/419400 (executing program) 2021/05/04 01:48:32 fetching corpus: 10591, signal 330113/419406 (executing program) 2021/05/04 01:48:32 fetching corpus: 10641, signal 330632/419430 (executing program) 2021/05/04 01:48:32 fetching corpus: 10690, signal 330987/419434 (executing program) 2021/05/04 01:48:32 fetching corpus: 10738, signal 331522/419440 (executing program) 2021/05/04 01:48:32 fetching corpus: 10788, signal 332192/419443 (executing program) 2021/05/04 01:48:32 fetching corpus: 10838, signal 332598/419444 (executing program) 2021/05/04 01:48:32 fetching corpus: 10888, signal 333324/419462 (executing program) 2021/05/04 01:48:33 fetching corpus: 10938, signal 333986/419474 (executing program) 2021/05/04 01:48:33 fetching corpus: 10985, signal 334512/419482 (executing program) 2021/05/04 01:48:33 fetching corpus: 11034, signal 335045/419483 (executing program) 2021/05/04 01:48:33 fetching corpus: 11084, signal 335602/419483 (executing program) 2021/05/04 01:48:33 fetching corpus: 11134, signal 335995/419483 (executing program) 2021/05/04 01:48:33 fetching corpus: 11183, signal 336650/419483 (executing program) 2021/05/04 01:48:33 fetching corpus: 11233, signal 337108/419488 (executing program) 2021/05/04 01:48:33 fetching corpus: 11279, signal 337669/419490 (executing program) 2021/05/04 01:48:33 fetching corpus: 11329, signal 338127/419491 (executing program) 2021/05/04 01:48:33 fetching corpus: 11379, signal 338766/419491 (executing program) 2021/05/04 01:48:33 fetching corpus: 11429, signal 339179/419491 (executing program) 2021/05/04 01:48:33 fetching corpus: 11479, signal 339633/419495 (executing program) 2021/05/04 01:48:33 fetching corpus: 11528, signal 340000/419524 (executing program) 2021/05/04 01:48:33 fetching corpus: 11577, signal 340462/419527 (executing program) 2021/05/04 01:48:33 fetching corpus: 11627, signal 340941/419548 (executing program) 2021/05/04 01:48:33 fetching corpus: 11677, signal 341363/419555 (executing program) 2021/05/04 01:48:33 fetching corpus: 11727, signal 341794/419555 (executing program) 2021/05/04 01:48:34 fetching corpus: 11776, signal 342351/419555 (executing program) 2021/05/04 01:48:34 fetching corpus: 11826, signal 342860/419555 (executing program) 2021/05/04 01:48:34 fetching corpus: 11876, signal 343254/419555 (executing program) 2021/05/04 01:48:34 fetching corpus: 11925, signal 343674/419566 (executing program) 2021/05/04 01:48:34 fetching corpus: 11975, signal 344272/419569 (executing program) 2021/05/04 01:48:34 fetching corpus: 12023, signal 344707/419569 (executing program) 2021/05/04 01:48:34 fetching corpus: 12073, signal 345085/419581 (executing program) 2021/05/04 01:48:34 fetching corpus: 12123, signal 345511/419581 (executing program) 2021/05/04 01:48:34 fetching corpus: 12173, signal 345832/419596 (executing program) 2021/05/04 01:48:34 fetching corpus: 12223, signal 346466/419596 (executing program) 2021/05/04 01:48:34 fetching corpus: 12272, signal 346877/419638 (executing program) 2021/05/04 01:48:34 fetching corpus: 12322, signal 347499/419638 (executing program) 2021/05/04 01:48:34 fetching corpus: 12372, signal 348073/419650 (executing program) 2021/05/04 01:48:34 fetching corpus: 12422, signal 348452/419650 (executing program) 2021/05/04 01:48:34 fetching corpus: 12472, signal 349386/419650 (executing program) 2021/05/04 01:48:34 fetching corpus: 12521, signal 349934/419650 (executing program) 2021/05/04 01:48:34 fetching corpus: 12570, signal 350424/419650 (executing program) 2021/05/04 01:48:35 fetching corpus: 12620, signal 350796/419650 (executing program) 2021/05/04 01:48:35 fetching corpus: 12668, signal 351117/419650 (executing program) 2021/05/04 01:48:35 fetching corpus: 12717, signal 351605/419653 (executing program) 2021/05/04 01:48:35 fetching corpus: 12766, signal 351955/419653 (executing program) 2021/05/04 01:48:35 fetching corpus: 12816, signal 352301/419653 (executing program) 2021/05/04 01:48:35 fetching corpus: 12866, signal 352618/419681 (executing program) 2021/05/04 01:48:35 fetching corpus: 12915, signal 353109/419681 (executing program) 2021/05/04 01:48:35 fetching corpus: 12965, signal 353491/419681 (executing program) 2021/05/04 01:48:35 fetching corpus: 13014, signal 353836/419682 (executing program) 2021/05/04 01:48:35 fetching corpus: 13064, signal 354307/419682 (executing program) 2021/05/04 01:48:35 fetching corpus: 13114, signal 354787/419682 (executing program) 2021/05/04 01:48:35 fetching corpus: 13162, signal 355120/419745 (executing program) 2021/05/04 01:48:35 fetching corpus: 13212, signal 355541/419745 (executing program) 2021/05/04 01:48:35 fetching corpus: 13262, signal 356043/419745 (executing program) 2021/05/04 01:48:35 fetching corpus: 13312, signal 356378/419745 (executing program) 2021/05/04 01:48:35 fetching corpus: 13361, signal 356720/419759 (executing program) 2021/05/04 01:48:35 fetching corpus: 13411, signal 357137/419759 (executing program) 2021/05/04 01:48:36 fetching corpus: 13459, signal 357557/419769 (executing program) 2021/05/04 01:48:36 fetching corpus: 13509, signal 358085/419769 (executing program) 2021/05/04 01:48:36 fetching corpus: 13559, signal 358474/419770 (executing program) 2021/05/04 01:48:36 fetching corpus: 13609, signal 358964/419771 (executing program) 2021/05/04 01:48:36 fetching corpus: 13658, signal 359373/419773 (executing program) 2021/05/04 01:48:36 fetching corpus: 13708, signal 359907/419785 (executing program) 2021/05/04 01:48:36 fetching corpus: 13756, signal 360324/419790 (executing program) 2021/05/04 01:48:36 fetching corpus: 13806, signal 360600/419804 (executing program) 2021/05/04 01:48:36 fetching corpus: 13856, signal 361023/419804 (executing program) 2021/05/04 01:48:36 fetching corpus: 13906, signal 361309/419804 (executing program) 2021/05/04 01:48:36 fetching corpus: 13956, signal 361860/419804 (executing program) 2021/05/04 01:48:36 fetching corpus: 14006, signal 362266/419809 (executing program) 2021/05/04 01:48:36 fetching corpus: 14056, signal 362856/419809 (executing program) 2021/05/04 01:48:36 fetching corpus: 14106, signal 363216/419809 (executing program) 2021/05/04 01:48:36 fetching corpus: 14156, signal 363562/419819 (executing program) 2021/05/04 01:48:36 fetching corpus: 14206, signal 364078/419819 (executing program) 2021/05/04 01:48:36 fetching corpus: 14256, signal 364415/419819 (executing program) 2021/05/04 01:48:37 fetching corpus: 14306, signal 364800/419819 (executing program) 2021/05/04 01:48:37 fetching corpus: 14356, signal 365445/419819 (executing program) 2021/05/04 01:48:37 fetching corpus: 14406, signal 365900/419819 (executing program) 2021/05/04 01:48:37 fetching corpus: 14456, signal 366246/419820 (executing program) 2021/05/04 01:48:37 fetching corpus: 14506, signal 366577/419822 (executing program) 2021/05/04 01:48:37 fetching corpus: 14556, signal 367140/419822 (executing program) 2021/05/04 01:48:37 fetching corpus: 14606, signal 367535/419827 (executing program) 2021/05/04 01:48:37 fetching corpus: 14655, signal 367890/419827 (executing program) 2021/05/04 01:48:37 fetching corpus: 14705, signal 368269/419827 (executing program) 2021/05/04 01:48:37 fetching corpus: 14755, signal 368606/419838 (executing program) 2021/05/04 01:48:37 fetching corpus: 14805, signal 368938/419863 (executing program) 2021/05/04 01:48:37 fetching corpus: 14855, signal 369226/419863 (executing program) 2021/05/04 01:48:37 fetching corpus: 14905, signal 369613/419863 (executing program) 2021/05/04 01:48:37 fetching corpus: 14955, signal 369995/419863 (executing program) 2021/05/04 01:48:37 fetching corpus: 15004, signal 370544/419863 (executing program) 2021/05/04 01:48:37 fetching corpus: 15053, signal 370822/419863 (executing program) 2021/05/04 01:48:37 fetching corpus: 15103, signal 371119/419863 (executing program) 2021/05/04 01:48:38 fetching corpus: 15153, signal 371554/419873 (executing program) 2021/05/04 01:48:38 fetching corpus: 15203, signal 371812/419873 (executing program) 2021/05/04 01:48:38 fetching corpus: 15253, signal 372404/419873 (executing program) 2021/05/04 01:48:38 fetching corpus: 15303, signal 372787/419873 (executing program) 2021/05/04 01:48:38 fetching corpus: 15351, signal 373168/419900 (executing program) 2021/05/04 01:48:38 fetching corpus: 15401, signal 373939/419902 (executing program) 2021/05/04 01:48:38 fetching corpus: 15451, signal 374477/419918 (executing program) 2021/05/04 01:48:38 fetching corpus: 15501, signal 374809/419918 (executing program) 2021/05/04 01:48:38 fetching corpus: 15551, signal 375402/419918 (executing program) 2021/05/04 01:48:38 fetching corpus: 15600, signal 375700/419918 (executing program) 2021/05/04 01:48:38 fetching corpus: 15650, signal 376154/419918 (executing program) 2021/05/04 01:48:38 fetching corpus: 15699, signal 376541/419918 (executing program) 2021/05/04 01:48:38 fetching corpus: 15744, signal 377083/419926 (executing program) 2021/05/04 01:48:38 fetching corpus: 15794, signal 377481/419938 (executing program) 2021/05/04 01:48:38 fetching corpus: 15844, signal 377826/419938 (executing program) 2021/05/04 01:48:38 fetching corpus: 15894, signal 378150/419940 (executing program) 2021/05/04 01:48:38 fetching corpus: 15942, signal 378705/419943 (executing program) 2021/05/04 01:48:39 fetching corpus: 15992, signal 379168/419943 (executing program) 2021/05/04 01:48:39 fetching corpus: 16042, signal 379451/419951 (executing program) 2021/05/04 01:48:39 fetching corpus: 16092, signal 379784/419969 (executing program) 2021/05/04 01:48:39 fetching corpus: 16142, signal 380163/419982 (executing program) 2021/05/04 01:48:39 fetching corpus: 16190, signal 380564/419982 (executing program) 2021/05/04 01:48:39 fetching corpus: 16240, signal 380920/419984 (executing program) 2021/05/04 01:48:39 fetching corpus: 16290, signal 381298/419985 (executing program) 2021/05/04 01:48:39 fetching corpus: 16340, signal 381686/419985 (executing program) 2021/05/04 01:48:39 fetching corpus: 16389, signal 382086/419985 (executing program) 2021/05/04 01:48:39 fetching corpus: 16439, signal 382457/419985 (executing program) 2021/05/04 01:48:39 fetching corpus: 16489, signal 382783/419985 (executing program) 2021/05/04 01:48:39 fetching corpus: 16539, signal 383096/420001 (executing program) 2021/05/04 01:48:39 fetching corpus: 16589, signal 383336/420001 (executing program) 2021/05/04 01:48:39 fetching corpus: 16639, signal 383623/420001 (executing program) 2021/05/04 01:48:39 fetching corpus: 16689, signal 383992/420001 (executing program) 2021/05/04 01:48:39 fetching corpus: 16737, signal 384313/420016 (executing program) 2021/05/04 01:48:39 fetching corpus: 16787, signal 384665/420016 (executing program) 2021/05/04 01:48:39 fetching corpus: 16837, signal 385121/420023 (executing program) 2021/05/04 01:48:39 fetching corpus: 16885, signal 385438/420023 (executing program) 2021/05/04 01:48:40 fetching corpus: 16935, signal 385825/420023 (executing program) 2021/05/04 01:48:40 fetching corpus: 16985, signal 386205/420023 (executing program) 2021/05/04 01:48:40 fetching corpus: 17034, signal 386534/420023 (executing program) 2021/05/04 01:48:40 fetching corpus: 17084, signal 386834/420023 (executing program) 2021/05/04 01:48:40 fetching corpus: 17134, signal 387165/420023 (executing program) 2021/05/04 01:48:40 fetching corpus: 17184, signal 387706/420035 (executing program) 2021/05/04 01:48:40 fetching corpus: 17234, signal 388098/420035 (executing program) 2021/05/04 01:48:40 fetching corpus: 17281, signal 388379/420051 (executing program) 2021/05/04 01:48:40 fetching corpus: 17330, signal 388777/420051 (executing program) 2021/05/04 01:48:40 fetching corpus: 17380, signal 389058/420064 (executing program) 2021/05/04 01:48:40 fetching corpus: 17429, signal 389409/420071 (executing program) 2021/05/04 01:48:40 fetching corpus: 17479, signal 389652/420074 (executing program) 2021/05/04 01:48:40 fetching corpus: 17528, signal 390008/420075 (executing program) 2021/05/04 01:48:40 fetching corpus: 17577, signal 390576/420075 (executing program) 2021/05/04 01:48:40 fetching corpus: 17627, signal 390971/420100 (executing program) 2021/05/04 01:48:40 fetching corpus: 17677, signal 391438/420100 (executing program) 2021/05/04 01:48:41 fetching corpus: 17727, signal 391760/420100 (executing program) 2021/05/04 01:48:41 fetching corpus: 17777, signal 392169/420100 (executing program) 2021/05/04 01:48:41 fetching corpus: 17827, signal 392512/420100 (executing program) 2021/05/04 01:48:41 fetching corpus: 17877, signal 392726/420102 (executing program) 2021/05/04 01:48:41 fetching corpus: 17927, signal 393111/420117 (executing program) 2021/05/04 01:48:41 fetching corpus: 17976, signal 393506/420132 (executing program) 2021/05/04 01:48:41 fetching corpus: 18025, signal 393806/420132 (executing program) 2021/05/04 01:48:41 fetching corpus: 18075, signal 394184/420145 (executing program) 2021/05/04 01:48:41 fetching corpus: 18124, signal 394591/420227 (executing program) 2021/05/04 01:48:41 fetching corpus: 18174, signal 394874/420227 (executing program) 2021/05/04 01:48:41 fetching corpus: 18224, signal 395215/420227 (executing program) 2021/05/04 01:48:41 fetching corpus: 18274, signal 395537/420243 (executing program) 2021/05/04 01:48:41 fetching corpus: 18322, signal 395864/420252 (executing program) 2021/05/04 01:48:41 fetching corpus: 18372, signal 396144/420252 (executing program) 2021/05/04 01:48:41 fetching corpus: 18422, signal 396357/420252 (executing program) 2021/05/04 01:48:41 fetching corpus: 18472, signal 396681/420258 (executing program) 2021/05/04 01:48:41 fetching corpus: 18522, signal 396962/420263 (executing program) 2021/05/04 01:48:41 fetching corpus: 18571, signal 397366/420263 (executing program) 2021/05/04 01:48:42 fetching corpus: 18621, signal 397678/420265 (executing program) 2021/05/04 01:48:42 fetching corpus: 18670, signal 397881/420266 (executing program) 2021/05/04 01:48:42 fetching corpus: 18719, signal 398378/420277 (executing program) 2021/05/04 01:48:42 fetching corpus: 18768, signal 398623/420277 (executing program) 2021/05/04 01:48:42 fetching corpus: 18816, signal 398919/420278 (executing program) 2021/05/04 01:48:42 fetching corpus: 18865, signal 399200/420293 (executing program) 2021/05/04 01:48:42 fetching corpus: 18914, signal 399800/420301 (executing program) 2021/05/04 01:48:42 fetching corpus: 18964, signal 400028/420301 (executing program) 2021/05/04 01:48:42 fetching corpus: 19014, signal 400404/420301 (executing program) 2021/05/04 01:48:42 fetching corpus: 19064, signal 400707/420321 (executing program) 2021/05/04 01:48:42 fetching corpus: 19114, signal 400972/420322 (executing program) 2021/05/04 01:48:42 fetching corpus: 19164, signal 401358/420322 (executing program) 2021/05/04 01:48:42 fetching corpus: 19214, signal 401577/420322 (executing program) 2021/05/04 01:48:42 fetching corpus: 19264, signal 401854/420322 (executing program) 2021/05/04 01:48:42 fetching corpus: 19314, signal 402184/420323 (executing program) 2021/05/04 01:48:42 fetching corpus: 19364, signal 402505/420323 (executing program) 2021/05/04 01:48:42 fetching corpus: 19414, signal 402844/420323 (executing program) 2021/05/04 01:48:42 fetching corpus: 19464, signal 403120/420323 (executing program) 2021/05/04 01:48:43 fetching corpus: 19513, signal 403385/420323 (executing program) 2021/05/04 01:48:43 fetching corpus: 19563, signal 403628/420330 (executing program) 2021/05/04 01:48:43 fetching corpus: 19612, signal 403974/420330 (executing program) 2021/05/04 01:48:43 fetching corpus: 19662, signal 404287/420333 (executing program) 2021/05/04 01:48:43 fetching corpus: 19711, signal 404799/420342 (executing program) 2021/05/04 01:48:43 fetching corpus: 19761, signal 405095/420355 (executing program) 2021/05/04 01:48:43 fetching corpus: 19810, signal 405499/420375 (executing program) 2021/05/04 01:48:43 fetching corpus: 19860, signal 405774/420375 (executing program) 2021/05/04 01:48:43 fetching corpus: 19909, signal 406133/420381 (executing program) 2021/05/04 01:48:43 fetching corpus: 19959, signal 406477/420386 (executing program) 2021/05/04 01:48:43 fetching corpus: 20008, signal 406799/420396 (executing program) 2021/05/04 01:48:43 fetching corpus: 20058, signal 407061/420396 (executing program) 2021/05/04 01:48:43 fetching corpus: 20108, signal 407285/420396 (executing program) 2021/05/04 01:48:43 fetching corpus: 20158, signal 407653/420440 (executing program) 2021/05/04 01:48:43 fetching corpus: 20208, signal 408042/420444 (executing program) 2021/05/04 01:48:43 fetching corpus: 20257, signal 408258/420453 (executing program) 2021/05/04 01:48:44 fetching corpus: 20307, signal 408482/420453 (executing program) 2021/05/04 01:48:44 fetching corpus: 20357, signal 408899/420453 (executing program) 2021/05/04 01:48:44 fetching corpus: 20406, signal 409165/420453 (executing program) 2021/05/04 01:48:44 fetching corpus: 20455, signal 409469/420453 (executing program) 2021/05/04 01:48:44 fetching corpus: 20505, signal 409798/420457 (executing program) 2021/05/04 01:48:44 fetching corpus: 20555, signal 410091/420559 (executing program) 2021/05/04 01:48:44 fetching corpus: 20605, signal 410433/420561 (executing program) 2021/05/04 01:48:44 fetching corpus: 20655, signal 410680/420563 (executing program) 2021/05/04 01:48:44 fetching corpus: 20704, signal 411056/420563 (executing program) 2021/05/04 01:48:44 fetching corpus: 20754, signal 411337/420563 (executing program) 2021/05/04 01:48:44 fetching corpus: 20804, signal 411594/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 20854, signal 411953/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 20904, signal 412371/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 20954, signal 412768/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 21004, signal 413040/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 21054, signal 413326/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 21104, signal 413601/420583 (executing program) 2021/05/04 01:48:44 fetching corpus: 21154, signal 413943/420583 (executing program) 2021/05/04 01:48:45 fetching corpus: 21204, signal 414246/420583 (executing program) 2021/05/04 01:48:45 fetching corpus: 21254, signal 414509/420588 (executing program) 2021/05/04 01:48:45 fetching corpus: 21303, signal 414790/420588 (executing program) 2021/05/04 01:48:45 fetching corpus: 21353, signal 415057/420593 (executing program) 2021/05/04 01:48:45 fetching corpus: 21403, signal 415284/420593 (executing program) 2021/05/04 01:48:45 fetching corpus: 21453, signal 415575/420593 (executing program) 2021/05/04 01:48:45 fetching corpus: 21503, signal 415829/420593 (executing program) 2021/05/04 01:48:45 fetching corpus: 21552, signal 416197/420595 (executing program) 2021/05/04 01:48:45 fetching corpus: 21558, signal 416272/420595 (executing program) 2021/05/04 01:48:45 fetching corpus: 21558, signal 416272/420595 (executing program) 2021/05/04 01:48:46 starting 6 fuzzer processes 01:48:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x78ef814b0da3e8de) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:48:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:46 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) 01:48:46 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000800)={[{@fat=@flush}, {@fat=@debug}]}) 01:48:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [* ] A start job is running for dev-ttyS0.device (8s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (9s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (9s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (10s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (10s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (11s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (12s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (12s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (13s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (14s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (14s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (15s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (15s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (16s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (17s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (17s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (18s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (19s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (19s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (20s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (20s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (21s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (22s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (22s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (23s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (24s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (24s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (25s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (25s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (26s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (27s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (27s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (28s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (28s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (29s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (30s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (30s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (31s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (32s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (32s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (33s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (33s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (34s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (35s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (35s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (36s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (36s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (37s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (37s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (38s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (38s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (39s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (39s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (40s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (40s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (41s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (41s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (42s / 1min 30s)[ 49.290917][ T22] audit: type=1400 audit(1620092926.967:8): avc: denied { execmem } for pid=341 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 49.377406][ T348] cgroup1: Unknown subsys name 'perf_event' [ 49.399110][ T348] cgroup1: Unknown subsys name 'net_cls' [ 49.449818][ T349] cgroup1: Unknown subsys name 'perf_event' [ 49.456599][ T349] cgroup1: Unknown subsys name 'net_cls' [ 49.485720][ T350] cgroup1: Unknown subsys name 'perf_event' [ 49.498727][ T351] cgroup1: Unknown subsys name 'perf_event' [ 49.503802][ T352] cgroup1: Unknown subsys name 'perf_event' [ 49.508265][ T351] cgroup1: Unknown subsys name 'net_cls' [ 49.520307][ T350] cgroup1: Unknown subsys name 'net_cls' [ 49.523323][ T352] cgroup1: Unknown subsys name 'net_cls' [ 49.532465][ T353] cgroup1: Unknown subsys name 'perf_event' [ 49.544621][ T353] cgroup1: Unknown subsys name 'net_cls' [ 49.597618][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.604691][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.612607][ T348] device bridge_slave_0 entered promiscuous mode [*** ] A start [ 49.639368][ T348] bridge0: port 2(bridge_slave_1) entered blocking state job is running f[ 49.647018][ T348] bridge0: port 2(bridge_slave_1) entered disabled state or dev-ttyS0.dev[ 49.657091][ T348] device bridge_slave_1 entered promiscuous mode ice (42s / 1min 30s)[ 49.750677][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.757717][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.766017][ T350] device bridge_slave_0 entered promiscuous mode [ 49.773308][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.780719][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.788466][ T350] device bridge_slave_1 entered promiscuous mode [ 49.886647][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.893776][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.901639][ T352] device bridge_slave_0 entered promiscuous mode [ 49.913560][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.921160][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.928784][ T349] device bridge_slave_0 entered promiscuous mode [ 49.944571][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.951677][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.959481][ T352] device bridge_slave_1 entered promiscuous mode [ 49.967068][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.974821][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.982545][ T349] device bridge_slave_1 entered promiscuous mode [ 50.049928][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.056972][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.064949][ T351] device bridge_slave_0 entered promiscuous mode [ 50.090287][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.097335][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.105147][ T351] device bridge_slave_1 entered promiscuous mode [ 50.134766][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.142067][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.150170][ T353] device bridge_slave_0 entered promiscuous mode [ *** ] A start job is running for dev-ttyS0.device (43s / 1min 30s)[ 50.183201][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.190252][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.197550][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.204604][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.212669][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.220369][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.227670][ T353] device bridge_slave_1 entered promiscuous mode [ 50.276885][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.283943][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.291249][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.298280][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.348874][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.355907][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.363212][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.370244][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.422261][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.429310][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.436583][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.443624][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.471069][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.478113][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.485387][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.492691][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.508623][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.516208][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.523923][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.532216][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.539886][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.547004][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.554285][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.561555][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.569049][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.576186][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.584161][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.591690][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.619706][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ *** ] A start job is running for dev-ttyS0.device (43s / 1min 30s)[ 50.650834][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.659323][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.667419][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.674459][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.692462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.701230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.710021][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.717031][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.724806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.733334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.741764][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.748804][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.770263][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.778854][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.786982][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.794048][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.801583][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.809110][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.816492][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.824871][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.833239][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.840463][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.847903][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.856177][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.864550][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.871587][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.887917][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.895422][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.903084][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.913113][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.941918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.949939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.957280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.965417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.973975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.982553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.990925][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.997977][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.005282][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.014149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.022546][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.029585][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.036875][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.045677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.054015][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.061062][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.068654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.076652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.095232][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.103100][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.111663][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.120459][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.128817][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.136821][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.144770][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.153409][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.162461][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ *[0;[ 51.169804][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state 1;31m*[0;31[ 51.179174][ T165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready m*] A start job is running for dev-ttyS0.device (44s / 1min 30s)[ 51.211772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.220597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.229756][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.238524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.246639][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.253681][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.262210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.270799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.278809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.287046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.295395][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.303498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.311712][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.319787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.338425][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.346318][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.354522][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.362649][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.371158][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.379377][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.414142][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.423498][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.432061][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.441883][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.450513][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.483772][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.493154][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.501799][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.509761][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.517566][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.525778][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.534436][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.543246][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.557976][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.566226][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.585714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.594228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.603961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.612548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.632707][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ [ 51.641407][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready **][ 51.651090][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready A start job is [ 51.660682][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready running for dev-ttyS0.device (44s / 1min 30s)[ 51.700484][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.709900][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.723691][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.738208][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.746265][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.755109][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.763793][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.772300][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.780893][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.789246][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.797302][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.806386][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.823751][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.832260][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.844489][ T378] device batadv_slave_0 entered promiscuous mode [ 51.868052][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.878616][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.886675][ T382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 51.887057][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 01:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x78ef814b0da3e8de) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 51.913283][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.928315][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.939068][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.947453][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.958554][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.975257][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.984852][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x78ef814b0da3e8de) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 52.025381][ T376] device batadv_slave_0 left promiscuous mode [ 52.044682][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.061544][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 01:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x78ef814b0da3e8de) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 52.085513][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.094743][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.110524][ T378] device batadv_slave_0 entered promiscuous mode [ *] A start job is running for dev-ttyS0.device (45s / 1min 30s)[ 52.279026][ T378] device batadv_slave_0 left promiscuous mode 01:48:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:50 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) 01:48:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ **] A start job is running for dev-ttyS0.device (45s / 1min 30s)[ 52.787242][ T429] FAT-fs (loop3): bogus number of reserved sectors [ 52.793972][ T429] FAT-fs (loop3): Can't find a valid FAT filesystem [ 52.803549][ T432] device batadv_slave_0 entered promiscuous mode [ 52.812197][ T431] device batadv_slave_0 entered promiscuous mode [ 52.825448][ C1] hrtimer: interrupt took 25613 ns 01:48:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 53.008134][ T429] FAT-fs (loop3): bogus number of reserved sectors [ 53.031002][ T429] FAT-fs (loop3): Can't find a valid FAT filesystem 01:48:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ ***] A start job is running for dev-ttyS0.device (46s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (46s / 1min 30s)[ 53.735669][ T427] device batadv_slave_0 left promiscuous mode [ 53.767282][ T459] device batadv_slave_0 entered promiscuous mode 01:48:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:51 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) 01:48:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 53.783511][ T428] device batadv_slave_0 left promiscuous mode 01:48:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 53.832937][ T466] device batadv_slave_0 entered promiscuous mode [ 53.852683][ T457] device batadv_slave_0 left promiscuous mode [ 53.861949][ T470] device batadv_slave_0 entered promiscuous mode 01:48:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 53.957208][ T474] device batadv_slave_0 entered promiscuous mode 01:48:52 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) 01:48:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ *** ] A start job is running for dev-ttyS0.device (47s / 1min 30s)[ 54.522077][ T465] device batadv_slave_0 left promiscuous mode [ 54.538214][ T473] device batadv_slave_0 left promiscuous mode [ 54.545372][ T467] device batadv_slave_0 left promiscuous mode 01:48:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 54.596257][ T499] device batadv_slave_0 entered promiscuous mode [ 54.613780][ T500] device batadv_slave_0 entered promiscuous mode 01:48:52 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [*** ] A start job is running for dev-ttyS0.device (47s / 1min 30s)[ 54.660188][ T504] device batadv_slave_0 entered promiscuous mode 01:48:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 54.766599][ T498] device batadv_slave_0 left promiscuous mode 01:48:52 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:52 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 54.858909][ T497] device batadv_slave_0 left promiscuous mode [ 54.872953][ T501] device batadv_slave_0 left promiscuous mode 01:48:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) 01:48:53 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [** ] A start job is running for dev-ttyS0.device (48s / 1min 30s)[ 55.403744][ T530] device batadv_slave_0 entered promiscuous mode 01:48:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:53 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @random="d332e70398df"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00020028bd7000fbdbdf251c000000bb50fa9d728168f2bb73434d42252e47d5371fac84d85d22a04fb02c21ce55256f1a7ff25c4654c365aa3d35925dfd67cb1457b8e990bc0dde975611079e6c0d9e468dc97e108e6ab9fd98c4bf882646fd4c98092010e1680e60825d5c8d5b9bb46b8813bd928894bebafbbc8031299041ee", @ANYRES32=r3, @ANYBLOB="02008105f1b1c201000000ffbce9c10000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) preadv(r0, &(0x7f00000017c0), 0x2d6, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 55.543326][ T528] device batadv_slave_0 left promiscuous mode [ 55.617392][ T543] device batadv_slave_0 entered promiscuous mode 01:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:53 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) [* ] A start job is running for dev-ttyS0.device (48s / 1min 30s)[ 56.055420][ T538] device batadv_slave_0 left promiscuous mode 01:48:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:54 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:54 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x2100000000, 0x0) 01:48:54 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0x2e}, {0xfaf5, 0x0, 0x5, 0x4, 0x1, 0x8, 0x0, 0x4}, {0x3f, 0x1, 0x9, 0x101}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@loopback, 0x4d3, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x2, 0x1, 0x4, 0xf43, 0x6, 0x238}}, 0xe8) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:48:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x2100000000, 0x0) 01:48:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x2100000000, 0x0) 01:48:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r0, 0x2100000000, 0x0) 01:48:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x3f3, 0x0, 0x361, 0x5, 0x0, 0x80, 0xffff}, 0x0) sendfile(r4, r5, 0x0, 0x800000080004103) 01:48:54 executing program 0: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) 01:48:54 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x508, 0x70bd2a}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 01:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x480, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) [** ] A start job is running for dev-ttyS0.device (49s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (49s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (50s / 1min 30s)[ 57.175361][ T639] ================================================================== [ 57.183444][ T639] BUG: KASAN: stack-out-of-bounds in unwind_next_frame+0x1be/0x27b0 [ 57.191410][ T639] Read of size 8 at addr ffff8881e9077c80 by task syz-executor.0/639 [ 57.199456][ T639] [ 57.201803][ T639] CPU: 1 PID: 639 Comm: syz-executor.0 Not tainted 5.4.116-syzkaller-00428-g546a6e8726bc #0 [ 57.211852][ T639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.221899][ T639] Call Trace: [ 57.225250][ T639] dump_stack+0x1d8/0x24e [ 57.229571][ T639] ? debug_smp_processor_id+0x20/0x20 [ 57.234955][ T639] ? show_regs_print_info+0x12/0x12 [ 57.240147][ T639] ? printk+0xcf/0x114 [ 57.244205][ T639] print_address_description+0x9b/0x650 [ 57.249726][ T639] ? devkmsg_release+0x11c/0x11c [ 57.254668][ T639] ? check_preemption_disabled+0x9e/0x330 [ 57.260362][ T639] ? _raw_spin_lock+0xa3/0x1b0 [ 57.265203][ T639] ? debug_smp_processor_id+0x20/0x20 [ 57.270565][ T639] __kasan_report+0x182/0x260 [ 57.275237][ T639] ? unwind_next_frame+0x1be/0x27b0 [ 57.280416][ T639] ? check_memory_region+0x14/0x2e0 [ 57.285602][ T639] kasan_report+0x30/0x60 [ 57.290003][ T639] ? preempt_count_add+0x66/0x130 [ 57.295025][ T639] unwind_next_frame+0x1be/0x27b0 [ 57.300032][ T639] ? debug_smp_processor_id+0x20/0x20 [ 57.305395][ T639] ? switch_mm+0x100/0x100 [ 57.309798][ T639] ? check_memory_region+0x14/0x2e0 [ 57.314983][ T639] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 57.320948][ T639] ? __schedule+0x9b8/0x1170 [ 57.325524][ T639] ? is_mmconf_reserved+0x420/0x420 [ 57.330703][ T639] ? __rcu_read_lock+0x50/0x50 [ 57.335438][ T639] ? retint_kernel+0x1b/0x1b [ 57.340002][ T639] ? preempt_schedule_irq+0xef/0x140 [ 57.345275][ T639] ? preempt_schedule_notrace+0x190/0x190 [ 57.350969][ T639] ? get_stack_info+0x34/0x170 [ 57.356071][ T639] ? __unwind_start+0x58f/0x8e0 [ 57.361304][ T639] ? retint_kernel+0x1b/0x1b [ 57.365878][ T639] ? stack_trace_save_tsk+0x270/0x270 [ 57.371233][ T639] ? in_sched_functions+0x9/0x40 [ 57.376152][ T639] ? stack_trace_save_tsk+0x270/0x270 [ 57.381506][ T639] arch_stack_walk+0x114/0x140 [ 57.386244][ T639] ? check_memory_region+0x14/0x2e0 [ 57.391414][ T639] stack_trace_save_tsk+0x17c/0x270 [ 57.396590][ T639] ? stack_trace_consume_entry+0x230/0x230 [ 57.402400][ T639] proc_pid_stack+0x126/0x1f0 [ 57.407062][ T639] proc_single_show+0xd3/0x120 [ 57.411864][ T639] seq_read+0x4aa/0xd10 [ 57.416015][ T639] do_iter_read+0x41b/0x5c0 [ 57.420494][ T639] do_preadv+0x20d/0x350 [ 57.424712][ T639] ? do_writev+0x5a0/0x5a0 [ 57.429103][ T639] do_syscall_64+0xcb/0x1e0 [ 57.433600][ T639] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 57.439464][ T639] RIP: 0033:0x4665f9 [ 57.443356][ T639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 57.463023][ T639] RSP: 002b:00007f9dde4cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 57.471432][ T639] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 57.479380][ T639] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000005 [ 57.487340][ T639] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 57.495304][ T639] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 57.503355][ T639] R13: 00007ffe55fd42cf R14: 00007f9dde4cc300 R15: 0000000000022000 [ 57.511325][ T639] [ 57.513644][ T639] The buggy address belongs to the page: [ 57.519246][ T639] page:ffffea0007a41dc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 57.528319][ T639] flags: 0x8000000000000000() [ 57.532965][ T639] raw: 8000000000000000 0000000000000000 ffffea0007a41dc8 0000000000000000 [ 57.541520][ T639] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 57.550077][ T639] page dumped because: kasan: bad access detected [ 57.556458][ T639] [ 57.558772][ T639] Memory state around the buggy address: [ 57.564471][ T639] ffff8881e9077b80: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.572526][ T639] ffff8881e9077c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.580748][ T639] >ffff8881e9077c80: f1 f1 f1 f1 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 [ 57.588776][ T639] ^ [ 57.592812][ T639] ffff8881e9077d00: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 57.600936][ T639] ffff8881e9077d80: 00 00 00 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 [ 57.609057][ T639] ================================================================== [ 57.617179][ T639] Disabling lock debugging due to kernel taint 01:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x480, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) 01:48:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) lseek(r0, 0x1000000, 0x0) socketpair(0x26, 0x0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000034010054, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000000000000000080008000100000000ff", 0x24) sendmsg$AUDIT_USER_TTY(r2, 0x0, 0x24004804) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000540)=""/170) sendto$inet(r1, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 01:48:55 executing program 5: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18020100"/23], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004ac0)={0x4}, 0x8, 0x10, &(0x7f0000004b00)={0x0, 0x6}, 0x10, 0x0, r0}, 0x78) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1329], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x480, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) 01:48:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 0: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) 01:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x480, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x40) 01:48:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) lseek(r0, 0x1000000, 0x0) socketpair(0x26, 0x0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000034010054, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000000000000000080008000100000000ff", 0x24) sendmsg$AUDIT_USER_TTY(r2, 0x0, 0x24004804) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000540)=""/170) sendto$inet(r1, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 01:48:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x508, 0x70bd2a}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 01:48:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 0: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) 01:48:55 executing program 5: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18020100"/23], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004ac0)={0x4}, 0x8, 0x10, &(0x7f0000004b00)={0x0, 0x6}, 0x10, 0x0, r0}, 0x78) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1329], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:48:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) lseek(r0, 0x1000000, 0x0) socketpair(0x26, 0x0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000034010054, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000000000000000080008000100000000ff", 0x24) sendmsg$AUDIT_USER_TTY(r2, 0x0, 0x24004804) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000540)=""/170) sendto$inet(r1, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 01:48:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="070a052208c559771f", 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000040)=0x1000) 01:48:55 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x508, 0x70bd2a}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 01:48:55 executing program 0: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) 01:48:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) lseek(r0, 0x1000000, 0x0) socketpair(0x26, 0x0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000034010054, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000000000000000080008000100000000ff", 0x24) sendmsg$AUDIT_USER_TTY(r2, 0x0, 0x24004804) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000540)=""/170) sendto$inet(r1, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 01:48:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:48:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 01:48:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:48:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ *** ] A start job is running for dev-ttyS0.device (50s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (51s / 1min 30s)[ 58.164278][ T706] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 01:48:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:48:56 executing program 5: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18020100"/23], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004ac0)={0x4}, 0x8, 0x10, &(0x7f0000004b00)={0x0, 0x6}, 0x10, 0x0, r0}, 0x78) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1329], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:48:56 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x508, 0x70bd2a}, 0x10}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 01:48:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 01:48:56 executing program 0: io_setup(0x8, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) 01:48:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 01:48:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f36533e, 0x50) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 01:48:56 executing program 5: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004b40)={0x2, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18020100"/23], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004ac0)={0x4}, 0x8, 0x10, &(0x7f0000004b00)={0x0, 0x6}, 0x10, 0x0, r0}, 0x78) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1329], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 01:48:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:48:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 01:48:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:48:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:48:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 01:48:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ **] A start job is running for dev-ttyS0.device (51s / 1min 30s)[ 58.690207][ T762] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 58.698647][ T762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 01:48:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 01:48:56 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:56 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:48:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) write$binfmt_misc(r1, &(0x7f00000003c0)={'syz1'}, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:48:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 01:48:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:48:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="63dad3e3", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="a3", 0x1}, {&(0x7f00000001c0)="e3", 0x1}, {0x0}, {&(0x7f0000000380)="f4", 0x1}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 01:48:57 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:48:57 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:48:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/25, 0x19}], 0x3}, 0x7}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 01:48:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="63dad3e3", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="a3", 0x1}, {&(0x7f00000001c0)="e3", 0x1}, {0x0}, {&(0x7f0000000380)="f4", 0x1}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 01:48:57 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:48:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="63dad3e3", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="a3", 0x1}, {&(0x7f00000001c0)="e3", 0x1}, {0x0}, {&(0x7f0000000380)="f4", 0x1}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) [ *] A start job is running for dev-ttyS0.device (52s / 1min 30s)[ 59.599897][ T819] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 59.608257][ T819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:57 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:57 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:48:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:48:57 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) [ **] A start job is running for dev-ttyS0.device (52s / 1min 30s)[ 60.117823][ T838] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 60.126380][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:48:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:48:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="63dad3e3", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="a3", 0x1}, {&(0x7f00000001c0)="e3", 0x1}, {0x0}, {&(0x7f0000000380)="f4", 0x1}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 01:48:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:58 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:48:58 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:58 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) [ ***] A start job is running for dev-ttyS0.device (53s / 1min 30s)[ 60.609522][ T860] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 60.618021][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) [ *** ] A start job is running for dev-ttyS0.device (53s / 1min 30s)[ 61.102506][ T872] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 61.110939][ T872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:48:59 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:48:59 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:48:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) [ *** ] A start job is running for dev-ttyS0.device (54s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (54s / 1min 30s)[ 61.670940][ T894] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 61.679703][ T894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:48:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) [ 62.163701][ T902] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 62.172054][ T902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:49:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:49:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:49:00 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:49:00 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) [** ] A start job is running for dev-ttyS0.device (55s / 1min 30s)[ 62.659901][ T925] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 62.668856][ T925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:49:00 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:49:00 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:49:00 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, &(0x7f0000000040)={&(0x7f00001ab000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3a5dfe0a, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r4, 0x1) 01:49:00 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:00 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:00 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:00 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:00 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:49:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 01:49:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:49:01 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, 0x0, 0x0) 01:49:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40882) write$evdev(r0, &(0x7f00000000c0)=[{}], 0xb) 01:49:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, 0x0, 0x0) 01:49:01 executing program 1: unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x402) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 01:49:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40882) write$evdev(r0, &(0x7f00000000c0)=[{}], 0xb) 01:49:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, 0x0, 0x0) 01:49:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40882) write$evdev(r0, &(0x7f00000000c0)=[{}], 0xb) 01:49:01 executing program 1: r0 = creat(0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v1={0x1000000, [{0x0, 0x7}]}, 0xc, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000003c0)=0xffff, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = getuid() setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)=@v3={0x3000000, [{0x7f}, {0x7ff, 0x6}], r4}, 0x18, 0x2) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) [* ] A start job is running for dev-ttyS0.device (56s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (56s / 1min 30s)[ 63.591141][ T985] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 63.599586][ T985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:49:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40882) write$evdev(r0, &(0x7f00000000c0)=[{}], 0xb) 01:49:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() gettid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@rand_addr=0x64010102, 0x4e20, 0xfff8, 0x0, 0x0, 0xa, 0x30, 0x0, 0x3c, 0x0, 0xee01}, {0x4303, 0x0, 0x100000001, 0xffff, 0x800, 0xecf4, 0x3518}, {0x0, 0x6, 0x4, 0x8}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x86, 0x1e66}}, 0xe8) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400400, 0x0) splice(r2, &(0x7f0000000180)=0x1, r3, &(0x7f0000000200)=0x2, 0xfffffffffffffffa, 0x5) 01:49:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x200}, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) getrlimit(0xe, &(0x7f00000000c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/13, 0xd}, 0x80000001}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000880)=""/122, 0x7a}], 0x4, &(0x7f0000000940)=""/21, 0x15}, 0x80000001}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/40, 0x28}, 0x100}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/43, 0x2b}], 0x3, &(0x7f0000001d00)=""/129, 0x81}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)=""/98, 0x62}}], 0x6, 0x141, &(0x7f0000006000)={0x77359400}) 01:49:01 executing program 1: r0 = creat(0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v1={0x1000000, [{0x0, 0x7}]}, 0xc, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000003c0)=0xffff, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = getuid() setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)=@v3={0x3000000, [{0x7f}, {0x7ff, 0x6}], r4}, 0x18, 0x2) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) 01:49:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x20fffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 01:49:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, 0x0, 0x0) 01:49:01 executing program 4: r0 = creat(0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v1={0x1000000, [{0x0, 0x7}]}, 0xc, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000003c0)=0xffff, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = getuid() setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)=@v3={0x3000000, [{0x7f}, {0x7ff, 0x6}], r4}, 0x18, 0x2) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) 01:49:01 executing program 5: r0 = creat(0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v1={0x1000000, [{0x0, 0x7}]}, 0xc, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000003c0)=0xffff, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = getuid() setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)=@v3={0x3000000, [{0x7f}, {0x7ff, 0x6}], r4}, 0x18, 0x2) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) lchown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) 01:49:01 executing program 1: r0 = creat(0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v1={0x1000000, [{0x0, 0x7}]}, 0xc, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x