[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 88.820472][ T32] audit: type=1800 audit(1576062918.869:25): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 88.849826][ T32] audit: type=1800 audit(1576062918.889:26): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 88.894892][ T32] audit: type=1800 audit(1576062918.929:27): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. 2019/12/11 11:15:33 fuzzer started 2019/12/11 11:15:38 dialing manager at 10.128.0.26:42787 2019/12/11 11:15:38 syscalls: 2514 2019/12/11 11:15:38 code coverage: enabled 2019/12/11 11:15:38 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/12/11 11:15:38 extra coverage: enabled 2019/12/11 11:15:38 setuid sandbox: enabled 2019/12/11 11:15:38 namespace sandbox: enabled 2019/12/11 11:15:38 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/11 11:15:38 fault injection: enabled 2019/12/11 11:15:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/11 11:15:38 net packet injection: enabled 2019/12/11 11:15:38 net device setup: enabled 2019/12/11 11:15:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/11 11:15:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:17:59 executing program 0: prctl$PR_MCE_KILL(0x35, 0x0, 0x8) syzkaller login: [ 250.327333][T12482] IPVS: ftp: loaded support on port[0] = 21 [ 250.472962][T12482] chnl_net:caif_netlink_parms(): no params data found [ 250.530387][T12482] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.537726][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.546827][T12482] device bridge_slave_0 entered promiscuous mode [ 250.556766][T12482] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.563946][T12482] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.572766][T12482] device bridge_slave_1 entered promiscuous mode [ 250.605156][T12482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.617966][T12482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.651459][T12482] team0: Port device team_slave_0 added [ 250.660842][T12482] team0: Port device team_slave_1 added [ 250.849388][T12482] device hsr_slave_0 entered promiscuous mode [ 251.005524][T12482] device hsr_slave_1 entered promiscuous mode [ 251.310729][T12482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.591525][T12482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.861496][T12482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.052395][T12482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.408208][T12482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.431492][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.440330][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:18:02 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, 0x0, 0x0) [ 252.455644][T12482] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.486248][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.496177][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.505298][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.512446][ T2786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.521237][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.530535][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.539601][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.546792][ T2786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.616714][T12482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.627339][T12482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.641232][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.650081][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.660062][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.670473][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.680328][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.689862][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.699683][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.709283][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.718464][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.728143][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.737407][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.752364][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.761649][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.791275][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.799052][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.816462][T12482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.009775][T12486] IPVS: ftp: loaded support on port[0] = 21 11:18:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3, 0x34af82064e8f6d86}, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) [ 253.173126][T12492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 253.173440][T12486] chnl_net:caif_netlink_parms(): no params data found [ 253.192392][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 253.192834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 253.264384][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.271708][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.280400][T12486] device bridge_slave_0 entered promiscuous mode [ 253.292005][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.299315][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.308461][T12486] device bridge_slave_1 entered promiscuous mode 11:18:03 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4) getsockopt$inet_int(r3, 0x0, 0x2, 0x0, &(0x7f0000000080)) [ 253.346533][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.359304][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.408623][T12486] team0: Port device team_slave_0 added [ 253.419683][T12486] team0: Port device team_slave_1 added 11:18:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x402, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x0, 0x0) [ 253.489294][T12486] device hsr_slave_0 entered promiscuous mode [ 253.526942][T12486] device hsr_slave_1 entered promiscuous mode [ 253.575849][T12486] debugfs: Directory 'hsr0' with parent '/' already present! [ 253.639580][T12486] netdevsim netdevsim1 netdevsim0: renamed from eth0 11:18:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, 0xffffffffffffffff, &(0x7f0000000240)) [ 253.709234][T12486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.761589][T12486] netdevsim netdevsim1 netdevsim2: renamed from eth2 11:18:03 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000002c0)={0x3, 0x8, 0xa11e, 0x8, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x33c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf359}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7829}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x4, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @remote}, 0x934}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f2}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x471}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x251e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x466}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x85, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff0ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x341}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)='x', 0x1, 0xfffffffffffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = dup3(r0, r5, 0x80000) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000380)=""/19) r7 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r8, r4}, &(0x7f0000000600)=""/83, 0x362, &(0x7f00000001c0)={&(0x7f0000000040)={'md4-generic\x00'}, &(0x7f0000000100)}) [ 253.817431][T12486] netdevsim netdevsim1 netdevsim3: renamed from eth3 11:18:04 executing program 0: modify_ldt$read(0x0, &(0x7f0000000380)=""/162, 0xa2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xffff00000000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0xd, 0x52, 0x7}, &(0x7f0000000140)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000004c0)=0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000069117d000000400045290600ffffffff950000000000000038ff1ae9869a2f1effac026bc01848f2e6d9ca840fd6cefbf1101c92ccc188e565056d8fba5a036d1e359cf827e2a6ec41310e3691b2c981d3ac4b213a761690e04c50dbdb55437f0db801516798f3e3207b65b9e7f5beaec81545fff6289a23ca4fe12016719ef863c9d7a35fe82ca0b305385f7a"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000000), 0xffffffaa, r0}, 0x78) [ 254.004385][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.054578][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.063225][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.089988][T12486] 8021q: adding VLAN 0 to HW filter on device team0 11:18:04 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x0, {0x2, 0x0, @loopback}, 'veth1_to_bridge\x00'}) r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000008400000000000000"], 0x1f}, 0xfc) [ 254.106683][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.116158][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.126379][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.133540][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.185411][T12486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.196296][T12486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.211106][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.219926][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.229287][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.238592][ T3908] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.245797][ T3908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.254037][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.264036][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.274007][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.284815][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.294474][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.304311][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.313874][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.323082][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.332632][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.341864][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 11:18:04 executing program 0: r0 = socket$inet(0x10, 0x3, 0x20000000006) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000000c0)={0x9f, 0x4}) ioctl(r1, 0x81000008912, &(0x7f0000000080)="0adc1f123c123d319bd070") sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000150007cca0fffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ec47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 254.412938][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.513222][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.515797][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.531638][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.540095][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.548584][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.555916][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 11:18:04 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x6c000000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x6c000000) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000780)={@rand_addr="8e44600e381aaca493f25a8dae0d1416", 0x4c, r4}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) r5 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x4010) lseek(r0, 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) dup(r6) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000ffeffffe) 11:18:04 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004f357c10b54fe720992bf6ff00b0"], 0x1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3aec}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x9, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x40, 0x10900) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x2010, r3, 0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b3dd24bf38e614d23cfe5512fa49fe89ad44832b7f19c5a8cd59922625359694e8ec676985ed5c9fbc9100266ec323d4f8"], 0x1}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c004) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 254.858885][ C0] hrtimer: interrupt took 28354 ns [ 254.901160][T12527] IPVS: ftp: loaded support on port[0] = 21 11:18:05 executing program 1: lsetxattr$smack_xattr_label(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7836f544edfb35c4928c028056c1d39357d3a400000000"], 0x1, 0x5) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'sxz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x7ff, 0x20103) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 11:18:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x6c000000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x6c000000) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000780)={@rand_addr="8e44600e381aaca493f25a8dae0d1416", 0x4c, r4}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) r5 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x4010) lseek(r0, 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) dup(r6) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000ffeffffe) [ 255.673656][T12532] IPVS: ftp: loaded support on port[0] = 21 11:18:05 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x4}, 0x2e8b}) syz_open_dev$vcsa(0x0, 0x5, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x210100, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) [ 255.775481][T12533] IPVS: ftp: loaded support on port[0] = 21 [ 255.778826][ T515] tipc: TX() has been purged, node left! [ 256.083122][T12541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.186281][T12541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.197470][T12541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.231846][T12541] device bridge_slave_0 left promiscuous mode [ 256.241768][T12541] bridge0: port 1(bridge_slave_0) entered disabled state 11:18:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x6c000000) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x24a) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x62d1, &(0x7f00000001c0)=[{&(0x7f0000000240)="bde8b8f5f479fd4821dbd8315bad5c3207855e7db666053d848188eedab9d6bb69ab644580b2e0cac33a254861c37911fbb57cc1cd5c5b4873769132179159ca501d886c85f754818aa4ecf39c06872f893f305a47c2b95632cab38a4da75552ebdfe76ce776033ad631007c48dcf5edcbec0d2db73f5ca63b45a07685cba0d4735cf2d956da1a9407569f7d18e904f8c7e7e28f56e077d98e9eaba3ddb3cc107e499f3bcf6c0785d45f89c9bba1ff4bb53ac7df41", 0x13a}, {&(0x7f0000000380)="af442cd500003038df0705a4f1f10cbb79e2bf195d8b6b902148ce4b52981d08178c", 0x2d1}, {&(0x7f0000000300)="5c5589501d22d17646dcfcd9ad67da98fe7f30e986c7d40f7e890822475b52f1bafbcba684ebe2ee2e67b3c382b1bd4fe0bf2ba3468d26b3651d4dcc159c49fdd24b6ab69bec8edd3a605e0580255a6732cb151b789e27d031b05f2f3f3f767e10eb2813f1e430a0c0dd19b6ce8e0114ec46f4"}, {&(0x7f0000000400)="7ccc325307db6a4e136dae04a0cffaa4b943db797211e118493e1aa871b1a1055cfc36e3ab40df54457ccae43eedabfca7d9900e29df0b5cd56494d2b42d4d9f5a6ae83149b63a7bcfdbf59e7a7614dd0ceeabc094ab90052977049fe6a58159a044d6d8b9ece34ae667f5", 0x2f}], 0x1000000000000042, 0x0, 0x480}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r4}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21}, 0x19) listen(r2, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x6c000000) dup(r6) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r5, 0x1) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r7 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) [ 256.315802][T12541] device bridge_slave_1 left promiscuous mode [ 256.328144][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.445761][T12541] bond0: (slave bond_slave_0): Releasing backup interface [ 256.779792][T12541] bond0: (slave bond_slave_1): Releasing backup interface [ 256.973673][T12541] team0: Port device team_slave_0 removed [ 257.080163][T12541] team0: Port device team_slave_1 removed [ 257.174489][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.187660][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.196858][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:18:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 11:18:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_MASTER={0x8, 0x4, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}}, 0x0) 11:18:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_MASTER={0x8, 0x4, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}}, 0x0) 11:18:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0xffffffd5}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x6c000000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/136) 11:18:07 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x1400) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x3f6ca9f57e9cbbeb) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x4600, 0x0) getsockname$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000080)={[0xf000, 0x3000, 0x2000, 0x5000], 0x9, 0x1, 0x2}) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xc000000}}], 0x4000000000000d0, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 11:18:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3c}}, 0xc) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:18:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000200)={0x1, {0x0, 0x989680}}) 11:18:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r3, 0x0, 0xc, &(0x7f00000000c0)='/dev/audio#\x00', 0xffffffffffffffff}, 0x30) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7f, 0x60100) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xfffffffffffffd67, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x597}]}}}]}, 0x3c}}, 0x0) 11:18:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) syz_open_procfs(0x0, 0x0) setsockopt(r1, 0x0, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x0) 11:18:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500)="e87325c0008c1b6736999a781494a33908d023a2b1efb1477458ef3b08d998337aeb1475feecd192d6d862c926ce31c24ff04aa346c825e706a32af87cec13bad4cc9924cff062d2ec1945dd07cd996f4e4bfcbb631c87c9611d5eb63081409dbfba96e95f872583f6c46a1a4b22d71e23a2f8d07151f26a8d1d2cb6dca5fce0cadd4cd1ed4ab24e60bde37aa06fcb9a27825a25478d01e8ff115d762a80e5a0666fc5ea48656f7b4d82c47d36790aae59564c44768ccba185da63d0d79504fadcc878afeeb8f3665cabf64908bfe16f91bbfb1c7a775c2c0db37123a6a266f1fcfa62b3dc2742714ff38d4768a8d14b874c200717072eb931c203190a369cb797a472a81a0e07c94723d721d97dc85c8d6108900fa8728978a70187c8d74f1e1b3cc22d6a83ae80fa662b7dd787e8d656394bb4faee14e01b7909c909b5d9340b6f0b4ac99df72e78123f7f30194f7f81a3212a7befc5abada9e5c38eb697bf74516b20e4167562064abb56e05003e944048f896e67ea8c51545330847c5da06cdc6a493a715037066a30ff6d1d32d28903c4ef5d90a9ae10e312eef91e493957b758f5b2512ae53785ec16d25dd9b506ec286d7f8ad48f1c8e4e18929b08cc8330130a5231bd83b7f3e2cbf59bbcdb4c81149ce288206c09954c83fe6b0c93aefb8050511e3686dff4d9b8a06acccc1a4f2dc5957724139a5cd3910cd0094e2c22005fc63d09c026291d6cc4d2385bf58fb3b0f7de1aae9662bce213a7641297b027afc240f11db7cc19c412dc51bb8f61e22f0d989dabfd74aaaaea9bae372ab93c1de45b96d7ddd4679b35c5155641d8a904a1fc94551f13cde2723ba737f2a76421b69756fb454821fa5732ef9f9097f31d10955ee9baf586c43079837dd5597a8d763ff9c164b41e79ffb53eac91b77fb0125f5856db3163aceb81d8069e222793dfbf6396c755c01abc938d97845373bc113a1a8c03963c1d9712fa986f9dd688f5a50dca5387a9993a69b92c6e7c00855b459b4aa1e3aabf71f27b87b8985201e695d6802aec10edf2ca0534160821c8de520636983c6b0338850b323be039762a04f371955fd9090a167e63a5796777eb91df8f9b89f9f501c9cc14236d3fa169eb4476598dabc5a1f517f5cd93cda1271e6dffd128efc06779ce4db6f214be56500aed9f8abc1353bce635834bc053251315c79ae0ed72d2d27dacfab380c312a8c5db78f734a75f3a983499fb3773ca2920cfa346cfe9d2a6500bdb52c55da1be165850e5725d4b184fdab6200e747c8a20153b6d7d282ed9e94a1c9d01494e098ed1681bb093c63b005aa9c04d", 0x3b3}], 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000008c0)={0x0, {{0x2, 0x0, @dev}}, 0x0, 0x1, [{{0x2, 0x4e24, @broadcast}}]}, 0x110) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 258.237035][T12587] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:18:08 executing program 1: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r8, 0x0) r9 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$link(0x8, r7, r9) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r11 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r10) r12 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r12, r9, r11}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r6, &(0x7f00000017c0), 0x3da, 0x6c000000) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) r16 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r17 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r17, &(0x7f00000017c0), 0x3da, 0x6c000000) r18 = open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) r19 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r19, &(0x7f00000017c0), 0x3da, 0x6c000000) io_submit(r0, 0x0, &(0x7f0000001fc0)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000001ac0)="e2", 0x0, 0x3, 0x0, 0x2, r15}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xd8ec, r14, &(0x7f0000001b80)="b523d1af89e6ff18ed1a73395585fb0955d5c916c4175fda736b6bcac2b8f0f0cc00c49e8d118f6d54a267b1c6350b64bfae66687fb213182471243e2fab28e6d749bd562cea97bfc97390aea5640d6c4e6edd30a7d0d182d49ed82b0b136e7e4bbd9ef82fbd5fea0ab534d051e0c2f538c5f3d6869ad15f49f79fc525604d7f20af19b03bb864064b139ddff08cd76686190cafde707965c959e11d18f4c0972e47e3ee07d98ce59d6c66893739b9b61944e8a0f3eee70993a74c02eb8ed304be8b48a77df5ba0e020b75", 0x0, 0x7ff, 0x0, 0x50316b4061266987}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x7, 0x25, r16, &(0x7f0000001d00)="c7d84713021e1f2cedf1175c7f2d5bddc86d4aaa8881b115e4b08ce850e226ac6ee88aa54647f22bd80311ccebf6a92786d064decea578773090835bc81c79821b0de0f1bb54a34ba2cb2eb4655c3e8cb1fca6a88c2f41434579a88532e1dc7616718486799ab8194032048cc2282a90609b1b6e384edb0ba7536ef4edba18d34811d938614de6472a2b2f2c6ea245436751", 0x0, 0x8, 0x0, 0x1, r17}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x1, 0x9, r18, &(0x7f0000001e40)="a81bc7e65501eb07d5bae554ce681f4df99306d96c5bf548c31c883dfb", 0x0, 0x10000, 0x0, 0x1, r19}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, r19, &(0x7f0000001ec0)="925e34a2db960ae9c73e9cd2d616bc31001268470a75f1ad884185252579a7e1cce5d1f0a97da6bcfdcf477f2f58c74c5c0bea522378c90495864541984a8df97c5da0993dd53f5225c29249d99c8afe9f73883a4725f01ce35e26db89ba77dcc6c3a16a7d7381c1278be78bd30493c0961a784518cedfa5251ec93571c62bc639a78d44c141de617cc98b1e36", 0x0, 0x4, 0x0, 0x6, r16}]) 11:18:08 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x119342, 0x1e5) sendfile(r0, r1, 0x0, 0x8000fffffffe) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x21a004) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x10000) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1b82) dup(r5) 11:18:08 executing program 1: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r8, 0x0) r9 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$link(0x8, r7, r9) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r11 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r10) r12 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r12, r9, r11}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r6, &(0x7f00000017c0), 0x3da, 0x6c000000) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) r16 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r17 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r17, &(0x7f00000017c0), 0x3da, 0x6c000000) r18 = open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) r19 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r19, &(0x7f00000017c0), 0x3da, 0x6c000000) io_submit(r0, 0x0, &(0x7f0000001fc0)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000001ac0)="e2", 0x0, 0x3, 0x0, 0x2, r15}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xd8ec, r14, &(0x7f0000001b80)="b523d1af89e6ff18ed1a73395585fb0955d5c916c4175fda736b6bcac2b8f0f0cc00c49e8d118f6d54a267b1c6350b64bfae66687fb213182471243e2fab28e6d749bd562cea97bfc97390aea5640d6c4e6edd30a7d0d182d49ed82b0b136e7e4bbd9ef82fbd5fea0ab534d051e0c2f538c5f3d6869ad15f49f79fc525604d7f20af19b03bb864064b139ddff08cd76686190cafde707965c959e11d18f4c0972e47e3ee07d98ce59d6c66893739b9b61944e8a0f3eee70993a74c02eb8ed304be8b48a77df5ba0e020b75", 0x0, 0x7ff, 0x0, 0x50316b4061266987}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x7, 0x25, r16, &(0x7f0000001d00)="c7d84713021e1f2cedf1175c7f2d5bddc86d4aaa8881b115e4b08ce850e226ac6ee88aa54647f22bd80311ccebf6a92786d064decea578773090835bc81c79821b0de0f1bb54a34ba2cb2eb4655c3e8cb1fca6a88c2f41434579a88532e1dc7616718486799ab8194032048cc2282a90609b1b6e384edb0ba7536ef4edba18d34811d938614de6472a2b2f2c6ea245436751", 0x0, 0x8, 0x0, 0x1, r17}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x1, 0x9, r18, &(0x7f0000001e40)="a81bc7e65501eb07d5bae554ce681f4df99306d96c5bf548c31c883dfb", 0x0, 0x10000, 0x0, 0x1, r19}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, r19, &(0x7f0000001ec0)="925e34a2db960ae9c73e9cd2d616bc31001268470a75f1ad884185252579a7e1cce5d1f0a97da6bcfdcf477f2f58c74c5c0bea522378c90495864541984a8df97c5da0993dd53f5225c29249d99c8afe9f73883a4725f01ce35e26db89ba77dcc6c3a16a7d7381c1278be78bd30493c0961a784518cedfa5251ec93571c62bc639a78d44c141de617cc98b1e36", 0x0, 0x4, 0x0, 0x6, r16}]) 11:18:08 executing program 2: r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000011c0)=0x0) r2 = getpgid(0xffffffffffffffff) r3 = getpgrp(0x0) r4 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001200)=0x0) r6 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001240)=0x0) clone3(&(0x7f00000012c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x41, 0x0, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/218, &(0x7f0000001280)=[r0, 0xffffffffffffffff, r1, r2, r3, r4, r5, r6, r7], 0x9}, 0x50) r8 = socket$inet(0x2, 0x80000, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000001340)=0xfffffff7, 0x4) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001380)='/dev/video2\x00', 0x2, 0x0) r10 = getpid() fcntl$setown(r9, 0x8, r10) pipe(&(0x7f00000013c0)={0xffffffffffffffff}) ioctl$BLKBSZSET(r11, 0x40081271, &(0x7f0000001400)=0x5) r12 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r12) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001440)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000014c0)={0x14, 0x88, 0xfa00, {r13, 0x10, 0x0, @in6={0xa, 0x4e22, 0x401, @empty, 0x3ff}}}, 0x90) ioctl$SNDCTL_DSP_GETOSPACE(r11, 0x8010500c, &(0x7f0000001580)) r14 = syz_open_dev$vcsa(&(0x7f00000015c0)='/dev/vcsa#\x00', 0x10000, 0x204000) getsockopt$inet6_mtu(r14, 0x29, 0x17, &(0x7f0000001600), &(0x7f0000001640)=0x4) setsockopt$CAIFSO_REQ_PARAM(r11, 0x116, 0x80, &(0x7f0000001680)="df96a03872b847cb3fc1d887e65326a663f8e15ffa17da9d6e37cf78658e7d2f484320a9c079f8c81911d251bf0ca479fbd4b5acd996ff61a8da18c147290629dcd2a0afcbcc9df10cb8a87b80543bf21e82b2ed3437464196d7c9b1815b1c62cd0118758d65729b", 0x68) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001700)='/dev/cachefiles\x00', 0x2801, 0x0) ioctl$TIOCMSET(r15, 0x5418, &(0x7f0000001740)=0x1f) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000001780)={0x7, 0x8, 0xfa00, {r13, 0xece6}}, 0x10) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/hwrng\x00', 0x281180, 0x0) read$char_usb(r16, &(0x7f0000001800)=""/208, 0xd0) bind$can_raw(r16, &(0x7f0000001900), 0x10) 11:18:08 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) 11:18:08 executing program 1: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r8, 0x0) r9 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$link(0x8, r7, r9) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r11 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r10) r12 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r12, r9, r11}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r6, &(0x7f00000017c0), 0x3da, 0x6c000000) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) r16 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r17 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r17, &(0x7f00000017c0), 0x3da, 0x6c000000) r18 = open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) r19 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r19, &(0x7f00000017c0), 0x3da, 0x6c000000) io_submit(r0, 0x0, &(0x7f0000001fc0)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000001ac0)="e2", 0x0, 0x3, 0x0, 0x2, r15}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xd8ec, r14, &(0x7f0000001b80)="b523d1af89e6ff18ed1a73395585fb0955d5c916c4175fda736b6bcac2b8f0f0cc00c49e8d118f6d54a267b1c6350b64bfae66687fb213182471243e2fab28e6d749bd562cea97bfc97390aea5640d6c4e6edd30a7d0d182d49ed82b0b136e7e4bbd9ef82fbd5fea0ab534d051e0c2f538c5f3d6869ad15f49f79fc525604d7f20af19b03bb864064b139ddff08cd76686190cafde707965c959e11d18f4c0972e47e3ee07d98ce59d6c66893739b9b61944e8a0f3eee70993a74c02eb8ed304be8b48a77df5ba0e020b75", 0x0, 0x7ff, 0x0, 0x50316b4061266987}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x7, 0x25, r16, &(0x7f0000001d00)="c7d84713021e1f2cedf1175c7f2d5bddc86d4aaa8881b115e4b08ce850e226ac6ee88aa54647f22bd80311ccebf6a92786d064decea578773090835bc81c79821b0de0f1bb54a34ba2cb2eb4655c3e8cb1fca6a88c2f41434579a88532e1dc7616718486799ab8194032048cc2282a90609b1b6e384edb0ba7536ef4edba18d34811d938614de6472a2b2f2c6ea245436751", 0x0, 0x8, 0x0, 0x1, r17}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x1, 0x9, r18, &(0x7f0000001e40)="a81bc7e65501eb07d5bae554ce681f4df99306d96c5bf548c31c883dfb", 0x0, 0x10000, 0x0, 0x1, r19}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, r19, &(0x7f0000001ec0)="925e34a2db960ae9c73e9cd2d616bc31001268470a75f1ad884185252579a7e1cce5d1f0a97da6bcfdcf477f2f58c74c5c0bea522378c90495864541984a8df97c5da0993dd53f5225c29249d99c8afe9f73883a4725f01ce35e26db89ba77dcc6c3a16a7d7381c1278be78bd30493c0961a784518cedfa5251ec93571c62bc639a78d44c141de617cc98b1e36", 0x0, 0x4, 0x0, 0x6, r16}]) 11:18:09 executing program 1: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r8, 0x0) r9 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$link(0x8, r7, r9) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r11 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r10) r12 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r12, r9, r11}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r6, &(0x7f00000017c0), 0x3da, 0x6c000000) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) r16 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r17 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r17, &(0x7f00000017c0), 0x3da, 0x6c000000) r18 = open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) r19 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r19, &(0x7f00000017c0), 0x3da, 0x6c000000) io_submit(r0, 0x0, &(0x7f0000001fc0)=[&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000001ac0)="e2", 0x0, 0x3, 0x0, 0x2, r15}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0xd8ec, r14, &(0x7f0000001b80)="b523d1af89e6ff18ed1a73395585fb0955d5c916c4175fda736b6bcac2b8f0f0cc00c49e8d118f6d54a267b1c6350b64bfae66687fb213182471243e2fab28e6d749bd562cea97bfc97390aea5640d6c4e6edd30a7d0d182d49ed82b0b136e7e4bbd9ef82fbd5fea0ab534d051e0c2f538c5f3d6869ad15f49f79fc525604d7f20af19b03bb864064b139ddff08cd76686190cafde707965c959e11d18f4c0972e47e3ee07d98ce59d6c66893739b9b61944e8a0f3eee70993a74c02eb8ed304be8b48a77df5ba0e020b75", 0x0, 0x7ff, 0x0, 0x50316b4061266987}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x7, 0x25, r16, &(0x7f0000001d00)="c7d84713021e1f2cedf1175c7f2d5bddc86d4aaa8881b115e4b08ce850e226ac6ee88aa54647f22bd80311ccebf6a92786d064decea578773090835bc81c79821b0de0f1bb54a34ba2cb2eb4655c3e8cb1fca6a88c2f41434579a88532e1dc7616718486799ab8194032048cc2282a90609b1b6e384edb0ba7536ef4edba18d34811d938614de6472a2b2f2c6ea245436751", 0x0, 0x8, 0x0, 0x1, r17}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x1, 0x9, r18, &(0x7f0000001e40)="a81bc7e65501eb07d5bae554ce681f4df99306d96c5bf548c31c883dfb", 0x0, 0x10000, 0x0, 0x1, r19}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, r19, &(0x7f0000001ec0)="925e34a2db960ae9c73e9cd2d616bc31001268470a75f1ad884185252579a7e1cce5d1f0a97da6bcfdcf477f2f58c74c5c0bea522378c90495864541984a8df97c5da0993dd53f5225c29249d99c8afe9f73883a4725f01ce35e26db89ba77dcc6c3a16a7d7381c1278be78bd30493c0961a784518cedfa5251ec93571c62bc639a78d44c141de617cc98b1e36", 0x0, 0x4, 0x0, 0x6, r16}]) 11:18:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x6c000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000001940000008000a00", @ANYRES32=0x6, @ANYRESDEC=r1], 0x5}}, 0x0) [ 259.069071][T12614] IPVS: ftp: loaded support on port[0] = 21 11:18:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x6c000000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4, 0x8001}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00\xc9\x1dr\x8b\xd2\x88\xcc5\x16\xbb\xf0\xd6{\x98c>]\xce\x03\xe2\x1d;\\\xd3\xc9u\xbb\teSV\xd1\xa8\xdft\xdc*\x7fG\xbe\x89[j\x9e`\x9ff\xd8\xf14V\xcf\xe5\xd62\x9b=\xbe@\asP@m\xae\x18\xa1\xfb\xbf\xfe\xf1\xcb\xe5\f\xee\x8c_\xf6\xda\\\xf5\xc09\xaf0t\xad\x01\x83\x00l\fU\xfe\x8c\xf3;\x8bJI\xe0\xfb\xcb\xef\xb6\x14\x1f\xd3\x80R\b^b[4\x98\xee\xef?\x98h\xab\x87\xf8\xb1U|\xd9\xd9') inotify_init1(0x800) sendfile(r2, r5, 0x0, 0x720) 11:18:09 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r14, &(0x7f00000017c0), 0x3da, 0x6c000000) open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r15, &(0x7f00000017c0), 0x3da, 0x6c000000) [ 259.277838][T12614] chnl_net:caif_netlink_parms(): no params data found [ 259.333676][T12614] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.340939][T12614] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.349971][T12614] device bridge_slave_0 entered promiscuous mode [ 259.360146][T12614] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.367495][T12614] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.376381][T12614] device bridge_slave_1 entered promiscuous mode [ 259.411877][T12614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.425218][T12614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:18:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000480)={0x540, 0x10001, 0x1f, 0xab, [], [], [], 0x2, 0x4, 0x6, 0x2, "581bf5365c04566d4e1b3e1353e07162"}) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x7, @pix={0x1}}) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x7, @pix={0x1}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=""/235, 0xeb, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x10, &(0x7f00000003c0)={&(0x7f00000000c0)=""/198, 0xc6, r5}}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x10098) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x6c000000) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f00000009c0)={0x2, 0x1, 0x1a, 0x15, 0xa8, &(0x7f00000005c0)="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"}) [ 259.459400][T12614] team0: Port device team_slave_0 added [ 259.469022][T12614] team0: Port device team_slave_1 added [ 259.570041][T12614] device hsr_slave_0 entered promiscuous mode 11:18:09 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r14, &(0x7f00000017c0), 0x3da, 0x6c000000) open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') [ 259.629827][T12614] device hsr_slave_1 entered promiscuous mode [ 259.685321][T12614] debugfs: Directory 'hsr0' with parent '/' already present! [ 259.807336][T12614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.903238][T12614] netdevsim netdevsim2 netdevsim1: renamed from eth1 11:18:10 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r14, &(0x7f00000017c0), 0x3da, 0x6c000000) open(&(0x7f0000001e00)='./file0\x00', 0x29801, 0x83) [ 259.961834][T12614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.993365][T12614] netdevsim netdevsim2 netdevsim3: renamed from eth3 11:18:10 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x2200, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000840)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = accept4(r6, &(0x7f00000005c0)=@tipc=@name, &(0x7f0000000340)=0x80, 0x800) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) dup2(r7, r9) preadv(r2, &(0x7f00000017c0), 0x3da, 0x6c000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="88ab18120d4b095be764e5201a2d23d256783dd3879833856709751ebe20ea09b02b0e7a036dd87c18bffb04e479236e5b6dd215b11ebd5c255d3f7c909bfdd1fbdf567e71ecd9960e53423ba757e67eb48c2700846a16f3abfc4e4430c3959e1759c9e2f8959590def8d6652dad7d0e2b2ffd53303f83d75a08500d1cb465a942ce6b58427ff5f297dc69cba0a860311ff79670b0468f2254cae2a7d416703b49", @ANYRES16, @ANYBLOB="210245ef97bda8265b42afc558c8c4280722000000000075641400020008000400e746000008000300f7080000d4760ce1cc9209f3412cacf05dac060000"], 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f850e040c9058ba9fba4b9c7a75f31da9e46fb4a377d64dfb3b187e9de0c5499e3f318ecdfd3b0c396022732042181d552f01dc95d31b51220e2db6bea6c219fbbec59ad758030703ecd6b1b26543b5784e9328c50e999617c1f3b29d2b84ed643b570fb61fa54565e314bb8b6c4ade5d4d4", @ANYRES16=0x0, @ANYBLOB="020025bd08000100050000001c000900080002000100000008000100000000000800010006000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x8020) r11 = syz_open_dev$sg(&(0x7f0000000700)='/B \x00\x00\x00\xe7#\x00', 0x1f, 0x202) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'s\x00\x00\x00\x00\x02\x00', @ifru_settings={0x6, 0x0, @cisco=&(0x7f0000000380)={0x6, 0x4}}}) write$binfmt_misc(r11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) r12 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r13, 0x401070ca, &(0x7f0000000080)={0xa8}) ioctl$VIDIOC_SUBDEV_G_FMT(r12, 0xc040564a, &(0x7f0000000200)) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000680)='/dev/v4\a\x00\x00\x00bdev#\x00', 0x4, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000480)="b805000000b9320000000f01c12e470f78660266baf80cb8b028cc8eef66bafc0c66b814cc66ef6766470fc7358c000000fef243d5e164e16424002c000000c744240208000000ff2c246742d2cd470f01cb66b8e2008ec0c4227918f2", 0x5d}], 0x1, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfc, 0x0, 0x0, 0xfe, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_config_ext={0x3f, 0xffffffff}, 0x10080, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 260.079056][T12614] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.086341][T12614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.094096][T12614] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.101350][T12614] bridge0: port 1(bridge_slave_0) entered forwarding state 11:18:10 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r14, &(0x7f00000017c0), 0x3da, 0x6c000000) [ 260.236339][T12614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.267373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.278097][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.303351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 260.336068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.344677][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.364877][T12614] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.402861][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.414847][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.423772][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.430964][T12542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.439384][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.448745][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.457691][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.464900][T12542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.511352][T12614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.522241][T12614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.562213][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.572229][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.582562][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.592460][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.602049][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.612014][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.621643][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.630771][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.640263][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.649315][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.658320][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.665985][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.679449][T12614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.817541][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.826535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:18:11 executing program 2: futex(0x0, 0x6, 0x0, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0xffffffffffffff44) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000140)=0x6, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'nlmon0\x00', 0x1}, 0x18) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) 11:18:11 executing program 0: set_mempolicy(0x8000, &(0x7f0000000140)=0x40000101, 0x3f) socket(0x6, 0x6, 0x1f) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x6c000000) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000680), &(0x7f0000000540)=0x80) r2 = add_key(&(0x7f0000000300)='pkcs7_pesp\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xffffffffffffffb8, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz'}, &(0x7f00000001c0)="16b88e6036e91002b090b7748d8133efe9bc435939a82969fd018facf5e2fb63d09b44e8d66255a107add2c821c9bca1b4eacd9231bb27dee2db027ae648a54adb8897262abd07f95c7599f0db23eaeac71850308feb7a9d96a93ae023a6643e7d14c58d9006b17fb600eae5a8bdc7eba6165923291964109e36fe7e70915dc8bf45de8515e225bec521ea9d8fa80df77fc7a247f6dbbeb445f2217a01f3c8998b339d31e31e3bf709b76ef02cabe773672044dacc4528554f8b4241f1bcc8263e5abc33", 0xc4, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x7ff, 0x20103) keyctl$negate(0xd, r3, 0x1f, r0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) fchown(r8, 0xee01, r9) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000700)={0x9, 0x3, 0x20}) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000080)='user\x00') r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r10, 0x80184132, &(0x7f0000000180)) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000007bf0e70c7be4a517c6ba7243b50fca4fd07b034ebd2bd76c895112073d337b108b0000000000000000004c00000000000000000000000000000000000000000000000000000000001bfee1acbba3953128ca5d8cc5ab6f092db3dd6793fe9a1c9e7fa5f5ec106c3d09763ecad09af57eda17aea715fd76b479193045805d29bcdc64f8377c49286d4f07a19239ec8a66ff2a8a7ae9cde9c2c3072df3ebc8bb464f5e7f78a1591251e13724470d8a368ca64dd847548f3c65d25027e02492b31c2fdbdc29723296846813000000895458ff7322de1233d58146baa235af9d4800"]) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x1, {0xa, 0x4e23, 0x7fff, @mcast1, 0x7}, r13}}, 0x38) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000500)) 11:18:11 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') [ 261.044150][T12663] IPVS: ftp: loaded support on port[0] = 21 11:18:11 executing program 0: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000300)="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", 0xfc) 11:18:11 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/vcsu\x00', 0x10000, 0x0) 11:18:11 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x6c000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x408200) r1 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1d) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 261.481180][T12678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.551340][T12678] bond1 (unregistering): Released all slaves 11:18:11 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/sequencer\x00', 0x200000, 0x0) [ 261.796215][T12678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.991254][T12678] bond1 (unregistering): Released all slaves 11:18:12 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x338}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='syzkaller1\x00', 0x6, 0x5cb, 0x8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000000240), 0x53d, 0x0) 11:18:12 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) 11:18:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r8, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0xd2ac1aefd628c5cd, &(0x7f0000000200)={@empty, @remote, r8}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0003d0ac14142603000e12050000000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 11:18:12 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, &(0x7f0000000100)=""/32, 0x20, 0x20010041, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x4, 0x4, {0xa, 0x200, 0xd0e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001ff) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000180), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="f4001100002b2c25fe8000000000000005baa68754a3000000000200000000000000000000ffffff8800000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x534}], 0x1}, 0x900) [ 262.247922][T12696] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 11:18:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r8, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0xd2ac1aefd628c5cd, &(0x7f0000000200)={@empty, @remote, r8}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0003d0ac14142603000e12050000000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) [ 262.340509][T12702] Dead loop on virtual device ip6_vti0, fix it urgently! 11:18:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x6c000000) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x6c000000) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000240)=r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r4 = socket$isdn(0x22, 0x3, 0x4) ioctl$sock_ifreq(r4, 0x8931, &(0x7f00000001c0)={'bpq0\x00', @ifru_mtu=0x4}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x94, &(0x7f0000000140)}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)=@file={0x2, './file0\x00'}, 0x6e, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) 11:18:12 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r12) [ 262.459885][T12707] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 11:18:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r8, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0xd2ac1aefd628c5cd, &(0x7f0000000200)={@empty, @remote, r8}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0003d0ac14142603000e12050000000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) [ 262.646075][T12717] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 11:18:12 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11:18:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r8, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0xd2ac1aefd628c5cd, &(0x7f0000000200)={@empty, @remote, r8}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0003d0ac14142603000e12050000000000812fa800040008000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 11:18:12 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r2 = dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000040)={0x5, "5e205fd7dd7c1fbb7bdfcb9cc58723005032134f10bd381283fb1c09f610fe3e", 0xfa728f5f31871aef, 0x1}) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4) r3 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x4, 0x90800) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x6c000000) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000100)={0x40000, {{0xa, 0x4e21, 0xffffc0ae, @local, 0x3}}}, 0x88) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1eff117f097a7039}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc004000}, 0x80) sendmsg$nl_netfilter(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000f0508002dbd7000fddbdf250c000038fff70159f405fa3142ea4b6782e82124656b567263df3a52657f8e2d698928a33dccae848f285b73ac5d9306bca29a4afa1010173d75c062ddd4ebf62e71f4467cb490148c7bb36b0793808083ee186b22b83c78b4c35d0fa48d3c671d524599fcd2aaa6850e8c5a9368f9ae3272286af691e125743cb7040c3d8ecff560ab66f4d9f5fde9b076b0d0e36c758ce795d8fc27b1892dd86975996e0830a6bf33a8634f5118428c01f662b673706c46e4bfc237e7cd3a", @ANYRES64=0x0, @ANYBLOB="0400630008007e00", @ANYRES32=r6, @ANYBLOB="080da6975d6bf9aa74fe833a00ac141cbb00"], 0xef}, 0x1, 0x0, 0x0, 0x10000080}, 0x0) [ 262.924309][T12726] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 11:18:13 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x0) r8 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$link(0x8, r6, r8) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r10 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r9) r11 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r11, r8, r10}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) preadv(r5, &(0x7f00000017c0), 0x3da, 0x6c000000) 11:18:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r7, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0xd2ac1aefd628c5cd, &(0x7f0000000200)={@empty, @remote, r7}, 0xc) 11:18:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000180)=0x74000000, 0x5) 11:18:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x4}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0x1bd, 0x0) 11:18:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r6, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) 11:18:13 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r9 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r8) r10 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r10, r7, r9}, &(0x7f0000000300)=""/227, 0x47d, &(0x7f0000000980)={&(0x7f0000000440)={'cbcmac-aes-ce\x00'}, &(0x7f00000009c0)="adc228e722f51f75abe787577775f9ff27ef95d634af5a7a5ff6fdaaf79f4a2edd4d0968e43686b75d44f91295c8fd509b02a5f49a5dc1132c673bcb2780dbf9797bb181d43736d3d7c14c0c6c5bceacc198970ab732e6836b81ee1409a75f6c54a63a9615e37dd01317ab66aa0be26a0a39b030aab01997b6cafe3aac745feb3d39da9c249f76606a509c5ff5c0918da922a7e2a5e1d115586c9dc3d2931440a7227a95de9b49f6dc8bcd529898c34f3bebfccf4a80fc15bb235a6f6b4e9f1a43ddf4561f2bdfd05708c9080091a3e08533140890868a57028b7b250a8a2c03dc2b1efe0972e3aaaba66b4e7c2ff7d533d1", 0xf2}) 11:18:13 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0xfec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=r0, @ANYRES32=r3, @ANYRESOCT=r5], @ANYRES32=0x0, @ANYBLOB="000000000000000000250012000c00010076657401000000001800020014000100000000bb64f82bb6974faee1b10b3a329240e11adb0d315422889ffc8f16756980c2e168111f2aab9dcbd50c2717880b195e83fc41692dc004000000a97f0fa6576356da18bcc4ed9bee22fda60f2c874f18788861ee8d9c73f15b96d1dddbd4be45339ecc0b8f9b6d04d5a31bdf2ace48ab7e88c0919c8533838673f182477e1f8e59854df659110db523497c22933a60eb11df933db3ca0bb1abd2a9939475f6e6724123433eb4328eac29e0481f9e8f078460d5fbbb376dd7f6dfeab3be0d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) 11:18:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) 11:18:13 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r8) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="3a8c8d9e53a3e19d4a096098a6c37891036fcdb55bb1f72e576e712f693c9f3a1bf0faa3086bc1a2afcfd2ec88ce13a58c7c9fcde32bdbed5d29db09cf083bd7015f4c54dcf13ec9c50e5b99284cf7602b6f0492fb88d26563b2f48da1dbf422a7c77accb5e62ba104559abc6dda225652f4dfbd4f9637cb034fafad8233e37c743a0a8e476402e5bb38117733e4da21cc20ebed9acbc4b5b0717bdfc73077a7db689493c71d84adca76fda39e4da21b432edaa15645959e5b0cc394c7ffa3ea554b8795edf1ba6943dd2dcb03f904694136e99daf0cb5b342ca61c9e3481caab3539db6b2e9dd462684d3dad2f195", 0xef, 0xfffffffffffffff9) 11:18:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 11:18:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 11:18:13 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="2aa8050b2f1a61c273390e2a41711ab0f17abee253f4ef856e9fa48c2cf8c3aafceff375f24621a4e51ebd6814021912cfb0205f2b0f59fcc0e745b287c0962f096ed6e9bb8f910a69f414d06e4154856e72f0cb71761ac83d058dfc9889eea7dc02ad5c832c029dd5de3c8171b9ebe5dfd2ae7551b4e7f82367c6cc4f8f", 0x7e, r8) 11:18:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:14 executing program 2: socket$inet6(0xa, 0x100000003, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:18:14 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) 11:18:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x6c000000) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20001014}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r6 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_FWMARK={0x8}]]}}}]}, 0x44}}, 0x0) 11:18:14 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r7) 11:18:14 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet6_buf(r0, 0x29, 0x79, &(0x7f00000000c0)=""/77, &(0x7f0000000140)=0x4d) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, &(0x7f0000000840)='none\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x6c000000) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000180)=""/71, &(0x7f0000000200)=0x47) 11:18:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80402, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000a300000052f2771866cf1f64cf9d8d6bcd9862057c770eb43036d6c25beae3a1da0d30551cfa603acddfb0a51628a64e620de9b90007868a9479a9cffd960d761e0bcbc492f04fe29306c27cf7bb9628e9c3fb78e46b9d01d10be42889579d15348a0cacc7480339d6f6b7bd7f33cbf9b150b30071c7521172db2dad4c81b47277e31a2337d34ba9f6ec9c172e3153c2d09152054eb44161f900"/199], &(0x7f0000000280)=0xc7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffffffe, 0x40000) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @broadcast, 'bridge0\x00'}}) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) [ 264.443398][T12797] hugetlbfs: Unknown parameter 'none' [ 264.461385][T12798] hugetlbfs: Unknown parameter 'none' 11:18:14 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 11:18:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x255c) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') sendfile(r3, r4, 0x0, 0x80000002) 11:18:14 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) r7 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$link(0x8, r5, r7) 11:18:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) pwritev(r4, &(0x7f0000001ac0)=[{&(0x7f0000001640)="cc271100304230a767437903375a884fa2dcc9171361ad39858b8ad3fb66eefa89c89f4997544917a3d10d6d73ca82f9de9470dbe8e18b5df49efb7bf92c5265b59cecb74cda94c1fb7902a32417b4d6a1487d5d963ac1084e13ca02df84ad06ba57a9", 0x63}, {&(0x7f00000019c0)="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", 0xfd}, {&(0x7f0000001b80)="bf007fec9c89d881fb915c9cf9040f38a82e59b275de8bae154f29e23c6d880e47c9d6da6722809d60f5e168af6236a88e41868d53fc985169fe219af6e7848ef2b69e5a694cfb8735820396b488658381106d0ca8a848dfe8940982f5e8e762c18579eba42bbefd0a2a8ed8b3bce1ad08cb1910e28d804e503656824283bdbd8d5e47f328e47255b61e58ad9cfb6c92ccaf6e8063bfbc9a28429ce5669091138aeea1bd8e8d7e90653039af266ef8d8b81a5cd5123e095f04d8a9a9a948d24336e9f08da22f61321df63f3a7cc0d072520789c682bee4892232cb4752b2bf7acb03033fd662f243fa0cdc92a8f2f6d1f0eb4d945b58325f2fe0033348e92518fb34ff844e220f10fde356354540c37f6689ad4200c1f1fb58efa993275919c0992d294d8d4e7f14e196a3bdd4d1a32e273c21c7c206af98ce37aeb67ce9d30e8b3fdc4bfb26843d6665b77d25e9568c9aece022b66be41235d4a4f410378538759cb4e8cc2fad97d888a0cfa3c0b6ae0142634cc865c39ccc112cb789cfc050392f301b1f6b5735d897e32763006806e81d459a111caa19706b47831e81820207ac05b114a6bb9958d0a3c3d04f4f73695eddf6da43194b880322ed42c0acc112444fe29c0ae5f0f6a6282197c46dc29fdfe43a37997c86e9e58243bf5595b07af0c312702d66bbccb1c82f7d31a2104be6bf204e734130b87c518569420c34f99058dd586a759c6c804f66d9e3e6895d5fc16637da09149ab184ac16aed8f29b873438281c189140a618de58b564d53dce026a4220e37a1911189e29d8beaff08158fd7e421b39af45ade91fdc5ca1d4cab59a6a86f7852048aabc827961158c19d97dac8eece0a492719df9206f2e66cf4f29c757dec3e6026bdd3d2bcffe78d81cca6e49022491ae79db19bf774f92c0bc8317b8bcc133f931da0ee78e5bbc8777afe60da4df9c7401fb0b8404031275b9ad595c85a42d615299abb8b211f8e24981229941237517dcd5a9246eb58d2c54326f1d5835264d286ba45581fa20e7d30c1fa9ee32a441931e3e2ce76260e97127d12dc88ffd68962fbf0f452dfeeda44dadcc04a660f22c77f4621bc44f55666b1b62c979741529f8aeac261d724dec6496990c270bdaec016ce6202afa254db6f60ca53bc30bed6a90182f2fd8410ed9cc3563de86f6a3c09020a9af9a3e15b355b1a24a19b279f5d344f458d5d44f03bd7a97f569777eeffd45f9c89e3a5cd93e9e8a45cf4d2598f712e0085b901cdc78466cbf598abf3faee15af73a9a9fdfd11de1d05c4065f6c4ecce038e6e0bb7aa9bf52226eb7756c3657428489da92e1acb20d9b44069113390bc7aa0c75d85dd06f45e2dcd31f65a6266b3535b2e12e7e5360e34a2ce65a46a74a8e4bd47749ec65330cd0a748b6b0d5b6a186681e429c9c35f9debc4b1a0c02eef0e659b86cd8dc62060a12c677e0e82ae8cdce47f91c7188caa82df6f38a0242d099f3803750052c01f9d36c1bc1c6fc6fd578823fe121ff60c8e1dac5602979b1bbe37bee45dc771ec8c3a6a9c32297b1697615d4c0d661c5bd77c0d029d54a23ff31b6e1ecb4e0eca681953d8b9cd52b8973b87dec68f32a7ed23959ed6389550d37384f5572fcaebe72b7e4e5be71ed75dfa5ffd5cc086d07128e8186d904a7892971e22ec579016092984d2218da3cd4409763da221166bd1a8f9d0257b0142211b56bd06abc46b26de6231a3be2349f0f124ddbbc9da6098ab6f212961de8c70269d5be90ac7bcae7de7251cb90668a1415e2d5a888729fee48373fa6818f1901567f2cda960d49ee7cf35a4c44164c712f5e35331f482b23ad81f31207b91d65e0618d2ea8ea386578993a756b25a5dd1a720ce36790d4808db163e1690add064a8cded44c4379fac5cd93e65f7858de609ecacecc5da83bbfa7ae1602768bae40f2951b4c60f874f70701d62a3f8a65f37d0e744c324f460c700fed740a0a4fcd120eaed9a0c93ee907bbe0033ba9d8a69909b92f3d5d952bb977e8bc05fe536c795613a467d7432b908c11c2b888e46edd0c537714390fffcc8c77a63771d47c6f1d5978a8deac0a53fc9ed1a3c9efa5af4474c7a1191bed67412ac19b465cc696a497b236520d859517b219b782c4ff7ba3dba660821a442d4f31f48757458ecf9237dae72a055a7e9e822b0b69bbe2f3312a65ea03db01b5ff21e6409c24cf0fcd7b15ec1b4a9943a85e473d7c0e845ec4ee11f3072ebfcf3084f3b6fa1d2706e73fe038382d374e872a82ff62eb58d71914ce1affb514c1c082d735c2013b396b3cc4c6707ea3a08fd90ec044c3976d642dd5e49eff68811944b6b4230a9d53723a864605bb61de36fc5d49728c8fae340e0fa2829404593125a1cf2f25c6ec7580d7f7f1044eeeec0f9a157c14383d4fb7d951ef98135575d645c1ea4fd64b81ed302d95ce3d8b6951932fab3a4268d80073f77b17f5e7b775e3deeaf23f0b1241138623d100d315c318377aec5c9c52bd04c958e09f0c6e1c6992d104a71e412ced17031a576646297ed8c7eeb968e1b39e87f1a9a26cc65e965d1d1f17b36ded612847f9fe2be1e166754fae72aabc6b212f76d23cabe9b6471e3fd5d442ff6169dcead5a1018ad0fb8dcb100ffcaf6fa28026705476e508a99bf0c96a75a1bf1208097ca87f1e14a923b6f16f606c8a74effa1df096b297821c262535248c1d081e5a0788a2f6746a5c914d8caa36e9cb5ac6936cd5bfa0072a4fcd196e72804189ad5851983f809e0aad8fb491ab31de8023b0abed04ee8625c3cd16dd489c18c1d6e69f152b9015c027edbcd4cfce1f8f63a24e4d78dd6b9d6f684c4107b1b13d36641fa1d7cab19db7819b38c4418e711b4f9a78bbd1c9169ae765a2a00714dc0c84712b2e20d4e2874fe1b361b831161702e6e3edec50f0ad445dc6b26a5c7d240c0d9f0ba7f2603cc2be6c28259e8a3435514f56a38cacd2164517326e91732cfc67546df37dd9d33f41882e95d1ebf72f02e0438f5852d349dfa2347a56dc9580fee2f910140347d3bc9b90179925e30b22a790f465354885f12ceb8276902a836198f509c4fe1aba83fa129e000f3d09d6c937ea2b6469b84473ea172203880dd1e3f032af7a05a894228340ab413eb22a221b16b6601be8b92fce70085efec7513bb613aecaf96b2a7afb2e70a7c13f67a869e25448dac5312f1f4614253ad5808539c616de29ff16805f176433d13acd50d78999d0b38e7e00c99c397f855a3e767855f7452ac324b55a895904642fd9f6f163f2bf226d8b63a0a1d5d6e4548e5035710c0c2affad35c72651d78529f3c504ff86ed527bddc0ad4bbbb25b350877026eeb07993eb2a7d43727fa53bbf8d560c7965eee7a4d92a50bacd5064e954909c26810318ca2c155c302587637fdb5418f6d21225f972a89013fe11fd1371498f779b4d3bb20ad880ca1ed62673f4b5f4c1804c3eefd735b8c7aeae4de1b619a3377e68479b4f3e39ca75883dc74c6fca9de9033702e45e19558a4cde7213846b43a7d517b5925aa4350026cef6e03c3382fc4f02e8fb687f33cdabf49e25e2cd44ee586677f6818eaa0dab897ab303540e0669b336d891090a1019c32d2fcd17584375078202942981c6d20313743550e7bcb0241a06d41735b3feaf345058717341aacdf424b31b02149792291f73d911e7b747740b4e77863883ba4dbdb8fc68d4e7efda492122bccc701e5bdc448db7585eefee162aef903347ed4e7270635ba1d9ec03dbf4ae621c3d7fd2273256ab315549f43652ba240366483d6f96d33ef99f3d0bbcf50178b741661108dc815a45bcb28d2631c297fded9c9bb9d4edd15eb3415772c092d686219e7be6ef0e2864b30641be96e3a693cd972cf6dd700bd1673f00bbe5d8acb3bbfe09ec23cabf982f3429834a810d38a95de88531d98364a7f7418a25497f269d486131a484848b", 0xb00}, {&(0x7f0000002b80)="1196412d7255902b903ec843beb84be92b127f69d01dbe31c86f3e6bb839cd6ed245fc72d8e26ee81b64dc64b86b8b0568df3e395ebd18048f2a2f1be60867b25ce7e59e2df3b30a4cd9b5733632f146e6621e73bb35e4bbe4b90c41ed7d3aac3da29385c518ce8cde3359a907e15f6c4c67b351e040a0d0202d0034f995d582ecc76045b68272f60825959980110c0464a763d27768e0aca0f3b5f34239d62cf124", 0xa2}], 0x4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001b40)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x4, 0x1f, 0x9, r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r7, @ANYRESDEC, @ANYPTR64, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT], @ANYBLOB="05df1262702fcb2ccfa967dd5821175d015bc7c7b7069aa9f14763b2a3c338b844109c72a83278d29595b09f25c3dd89610896a7c38dac09a812ef0b44e177200fc871542ff19f9af3b8451ebc36b6369527a1c64e91826be8db97f5bb6ad3a63828905a477b3537d288f79c786c6f27623684c37da7ff94441e2d411b941614c8", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=r1]], 0x7}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb5f97367bc7dcdee, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r10, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46e7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f7}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x900306}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e8, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xead}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfdb9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x204}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6fc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x62}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) dup(r8) dup(r8) r11 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r11, 0x80047453, &(0x7f0000000140)) r12 = semget(0x0, 0x4, 0x20) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xb43b7617f4b33ac3, 0x0, 0x0) semctl$SETALL(r12, 0x0, 0x11, &(0x7f0000000040)=[0x1f, 0x8, 0x6ed, 0x6]) 11:18:15 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) 11:18:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004f357c10b54fe720992bf6ff00b05f1a"], 0x14}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = getpgid(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005a802904000000000020000000000000"], 0x14}}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x4, 0x6, 0x8, 0x70bd29, 0x25dfdbfe, {0xc, 0x0, 0x2}, [@generic="87518f3ec229ce6570062894895c52e75a6c02845c1916318f6afdd183ae22d2aa1bcb9d3a3cbe5ab1fad160924e4a211c285d20ce6e5980fdf3f40d38dbcf4bf827a2630d36e2c4fd7969"]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) sendfile(r1, r2, 0x0, 0x800000000024) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000500)={0x2000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, 0x17, 0x0, &(0x7f0000000100)=""/18, 0x12, &(0x7f0000000400)=""/130, &(0x7f00000004c0)=[r4], 0x1}, 0x50) setpgid(r5, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x24, 0x9, 0x8, 0x0, 0x0, 0x3, 0x45802, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x5, @perf_config_ext, 0x8, 0x8, 0x4, 0x0, 0x0, 0x2, 0x5}, r0, 0x9, r2, 0xd74911ef4a7e00a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) unshare(0x40000000) 11:18:15 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x0) 11:18:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 265.539214][T12837] IPVS: ftp: loaded support on port[0] = 21 11:18:15 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 11:18:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0xb69, [0x6, 0x2, 0xff, 0x2, 0x0, 0xc000, 0xfdd8, 0x2, 0x2, 0x8, 0x8, 0x0, 0xef0, 0x81, 0x8, 0xc226, 0x4, 0x3ff, 0x44, 0x79ce, 0x0, 0x258, 0x8a8e, 0x5, 0x5, 0x1, 0x2, 0xfffe, 0x7fff, 0x9, 0x800, 0x1f, 0x9, 0x8, 0x7, 0x0, 0xff8, 0x3f, 0x804, 0x0, 0x5, 0x2, 0x5, 0x9, 0xc5, 0x7, 0x5, 0x7ff]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:16 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r5) [ 266.073990][T12837] IPVS: ftp: loaded support on port[0] = 21 11:18:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:16 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x22) unshare(0x40000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) [ 266.336283][T12860] IPVS: ftp: loaded support on port[0] = 21 11:18:16 executing program 3: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0xa80], 0x2, 0x26, 0x8, 0x100, 0x100, 0x4, {0x100, 0x1, 0x0, 0x3da0, 0x65, 0x8, 0x1, 0x8000, 0xfff9, 0x6, 0x800, 0x5, 0x4, 0x2, "972c7e0de51e3194aa10637a599a7139e05b2bfb5ff457036e647e49ace8aab0"}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x141020, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x202400, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000001c0)={0x3, 0xc00000, 0x7d3, 0x4, 0xfffffffe}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000200)={0xb, 0x4, 0x1, 0xffffffffffffffff}) fcntl$getownex(r3, 0x10, &(0x7f0000000240)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x200400, 0x0) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, r0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x91d9}, [@ldst={0x3, 0x2, 0x2, 0x2, 0x4, 0x50, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @map={0x18, 0x8}, @call={0x85, 0x0, 0x0, 0x55}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @ldst={0x3, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff4, 0x8}, @exit, @func]}, &(0x7f0000000400)='syzkaller\x00', 0xb, 0x20, &(0x7f0000000440)=""/32, 0x40f00, 0x1, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x4, 0x9, 0x3}, 0x10}, 0x78) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000580)=[r5, r6, r7, r8, r9, r10, r1], 0x7) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x10000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r11, 0x2287, &(0x7f0000000600)=0x401) r12 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r12, &(0x7f0000000740)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r13, 0x10, 0x0, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x401}}}, 0xa0) readlinkat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/214, 0xd6) r14 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_out(r14, 0x2, &(0x7f0000000940)) r15 = socket$caif_stream(0x25, 0x1, 0x1) accept(r15, &(0x7f0000000980)=@un=@abs, &(0x7f0000000a00)=0x80) socket$rds(0x15, 0x5, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000a40)=0x5) 11:18:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:16 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) [ 266.466765][T12860] IPVS: ftp: loaded support on port[0] = 21 [ 266.485040][ T391] tipc: TX() has been purged, node left! 11:18:16 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 11:18:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:17 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 267.048345][T12876] IPVS: ftp: loaded support on port[0] = 21 11:18:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:17 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 11:18:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 267.539641][T12876] chnl_net:caif_netlink_parms(): no params data found 11:18:17 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) [ 267.750548][T12876] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.757862][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.766725][T12876] device bridge_slave_0 entered promiscuous mode 11:18:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 267.840355][T12876] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.847778][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.856588][T12876] device bridge_slave_1 entered promiscuous mode [ 268.007500][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.056175][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.119494][T12876] team0: Port device team_slave_0 added [ 268.129907][T12876] team0: Port device team_slave_1 added 11:18:18 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) [ 268.209566][T12876] device hsr_slave_0 entered promiscuous mode [ 268.245591][T12876] device hsr_slave_1 entered promiscuous mode [ 268.288369][T12876] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.352387][T12876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.504436][T12876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.652764][T12876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.660905][ T391] tipc: TX() has been purged, node left! [ 268.669914][ T391] tipc: TX() has been purged, node left! [ 268.705211][T12876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.963532][T12876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.988923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 269.010348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.019235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.038139][T12876] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.069601][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.079375][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.088348][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.095552][T12542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.146765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.155500][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.165007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.173932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.181179][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.191129][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.201228][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.211162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.220959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.265346][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.274240][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.284106][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.294046][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.303190][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.312341][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.321504][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.350634][T12876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.390678][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.398399][T12542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.436497][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0 11:18:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:20 executing program 2: r0 = socket$kcm(0x2, 0x200000001, 0x84) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@alg={0x2, 'rn\xa9\xfe\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)='{', 0x1}], 0x1}, 0x40) io_getevents(0x0, 0x8, 0x1, &(0x7f0000000380)=[{}], &(0x7f00000003c0)={0x0, 0x989680}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) fsetxattr$system_posix_acl(r4, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="020000000100000000d34033fabbde75b5162e6b39a581985efe28ab1b30b6eda598577e0d1076342d3f935a6cdd191c75978b96b6268f37bf6a9e961fe1f67d8f5267a8c0381e3441cfb0ad36ae5f5fefb638b86bcd0ad031adb3ef23e06acdf8", @ANYRES32, @ANYBLOB="020002004dcb2f2a0321f6f8e53c03ffc521dedc43e8aeaf516def3e41430e7adb686fc6b322cfeb3281994db4ed495a11e5b4ba07080addb03a7c56cdffaf0f28f0aa7013ab1dc3a2325d4e97012f07852f4321dd5724ae2394cfba267871665da07faa993f6c4f7d254a5a3a14fd40bf118319cb7f", @ANYRESHEX, @ANYRES32, @ANYBLOB="3cadc590498c0ef80819f9aa8cec4c", @ANYRES32=r6, @ANYBLOB="00710700058bf8fb4794b2c2c9be002163ffce14666d2b3ba7a74e91fe0879e2d457a6493fac48cb4fee2373cdd20ed6b33981239e094945320f3738eafdc2317099c6569a413d743846e3c5a6bc82f37c7347ed362cfe8b271e06a0e4f73813ca33fd48c186e82d8070980f3faf0564360b1f646e0199cf826b0ef9720d", @ANYRESDEC=0x0, @ANYBLOB="08000600", @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="10000100000000002000070000000000"], 0xd, 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read'}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@measure='measure'}]}}) 11:18:20 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) close(r3) socket$isdn_base(0x22, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r7, 0x80}, {r7, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x80000000005000, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r10, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000300)={0x50000015}) fcntl$getown(r6, 0x9) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r11}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') 11:18:20 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) 11:18:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 270.327322][T12918] device nr0 entered promiscuous mode 11:18:20 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() r0 = getpgid(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) pipe2(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="d8d3a4321c1e54b9b47b4995a5bee657b2d8542698698db7fecec19e45b141e790ec062a9c884ebc05009a9bf7030b59eaa2f05cdf44c9fe4c0d42a25757e795eb2817f27a9abfeb45b5d01387ae09c50671fda36c167d87ed24710f76ffbcd612", 0x61}, {&(0x7f0000000140)="8d93682d3645a66298b06a18e8eb4933f47d743f932f1c", 0x17}, {&(0x7f0000000180)="98a15617168925fd259138ac85bf9d25602e2ca282bbd0b27c9561fdc7d06ce6675277c1b4cf71d41e7d72034bb32daa371c4cb01c29631d51ff6d8e88be74100c19fdfe734be2d34ecda154faa057c0ab516cb93ea46c1e943b8ea95164c839059df051d08211725511", 0x6a}, {0x0}], 0x4}], 0x1, 0x8001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) timerfd_gettime(r1, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu\t>-6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000480)={0x0, 0x1, 0xd2f5, 0xff, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000003c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x15}}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000440), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 11:18:20 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm-monitor\x00', 0x80, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) 11:18:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) getpgid(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x30, 0x3, 0x0, 0x7, 0xffffffff, 0x0, 0x5ee3, 0x100000000}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) close(r1) r2 = open(0x0, 0x141042, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) signalfd(r1, 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xbb, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf32(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xc5) sendfile(r1, r2, 0x0, 0x800000000024) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000240)={0x6, 'syzkaller1\x00', {0x6}, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x24, 0xb5, 0x4b, 0x0, 0x0, 0x3, 0x45802, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, r0, 0x9, 0xffffffffffffffff, 0xd74911ef4a7e00a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) r8 = fcntl$getown(r7, 0x9) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000000c0)=r8) 11:18:20 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_open_dev$radio(&(0x7f00000016c0)='/dev/radio#\x00', 0x1, 0x2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) [ 270.936175][T12935] IPVS: ftp: loaded support on port[0] = 21 11:18:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/203, 0xcb}], 0x155, 0x5) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0}, &(0x7f0000001100)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x10, &(0x7f0000001280)={&(0x7f00000011c0)=""/143, 0x8f, 0xffffffffffffffff}}, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x3, &(0x7f0000000040)=@raw=[@generic={0x2, 0xe, 0x0, 0x8, 0x10000}, @map={0x18, 0x7, 0x1, 0x0, r0}], &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0xc664429cc24df235, [], r1, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0xf, 0x0, 0x100}, 0x10, r2, r3}, 0x78) r4 = syz_open_dev$mouse(&(0x7f0000001380)='/dev/input/mouse#\x00', 0x8, 0x101000) lstat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@empty, @in=@remote, 0x4e23, 0x1, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x0, r1, r5}, {0xde, 0x1f, 0x1000, 0x406a, 0xc07b, 0x8000, 0x1, 0x1000}, {0x4, 0x4, 0x4b, 0x3ff}, 0x3f, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x18}, 0x4d4, 0x6c}, 0x0, @in=@remote, 0x3506, 0x1, 0x2, 0x4, 0x1, 0x7, 0x1}}, 0xe8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001580)=r2, 0x4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x200, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffff0000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8088810) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001740)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r9, 0xc048ae65, &(0x7f0000001780)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001800)={0x0, 0x9}, &(0x7f0000001840)=0x8) r10 = syz_open_dev$vcsa(&(0x7f0000001880)='/dev/vcsa#\x00', 0x800000000, 0x4402) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc2604110, &(0x7f00000018c0)={0x4, [[0x200, 0x20, 0x200, 0x1, 0x7, 0xffffc0fc, 0xa8, 0xd01e], [0x0, 0x6, 0x7, 0x3, 0x4, 0x9, 0x9, 0x1ff], [0xeb3, 0x8, 0x10000, 0x8, 0x80000001, 0xffffffff, 0xffffff2d, 0x1]], [], [{0x6, 0x1}, {0x0, 0x8c8d, 0x5}, {0x7ff, 0xc1b, 0x80000001}, {0x10000, 0x2, 0x200}, {0x9, 0x1f, 0x1f}, {0x0, 0x20, 0x8}, {0x9, 0x0, 0x9}, {0x7f, 0x2, 0x8}, {0x6, 0x7, 0x40}, {0x0, 0x5, 0x4}, {0x9, 0x4}, {0x7, 0x7fff, 0x7}], [], 0x6}) r11 = syz_open_dev$vcsa(&(0x7f0000001b40)='/dev/vcsa#\x00', 0x7fffffff, 0x80) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000001f80)={0x1, 0x0, 0x11, 0xd, 0xb5, &(0x7f0000001b80)}) r12 = socket$netlink(0x10, 0x3, 0xe) getsockopt$sock_buf(r12, 0x1, 0x1a, &(0x7f0000001fc0)=""/81, &(0x7f0000002040)=0x51) timerfd_gettime(r10, &(0x7f0000002080)) r13 = gettid() syz_open_procfs(r13, &(0x7f00000020c0)='net/unix\x00') r14 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002100)='/dev/bsg\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x2400, 0x5) r15 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002140)='/dev/nvram\x00', 0x40800, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002180)={0x0, 0xd8, "c92dbb0636f1b2ca5197ccfc4d27c713ed62342f73c3d15d50a7966aa82cfe7875123b0e611c82a2c3bab225d9bf81a6b38c1aad359866433acb617c77f69d28182725a4d3be24c49d1dfd22eed2e205e83cecd22d9991cab97b0d55259db9c12fa3bd1f5bb7b669f00b0b0c3e2fd02c135aeece09f9862028b2cbcc15bdc454f44466b893f3e911042d6a9e793d8d6c8149348003a928569588ae4a9d8c7554f128521186981817fc2d81207fd012d7df6131dceaa0a76404e6171619f9f43780d2a2a58559c1b0183f2a055312ac1234b0244f8afa2e7a"}, &(0x7f0000002280)=0xe0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r15, 0x84, 0x6, &(0x7f00000022c0)={r16, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000002380)=0x84) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000023c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000024c0)=0xe8) write$P9_RSTATu(r14, &(0x7f0000002500)={0x99, 0x7d, 0x2, {{0x0, 0x7a, 0x7, 0x2, {0x100, 0x1, 0x4}, 0x6b6085e0fe6b6b6b, 0x100, 0x3, 0x100, 0xb, '/dev/vcsa#\x00', 0xb, '/dev/nvram\x00', 0x21, '\x93cpuset!vboxnet1GPL\\em1cpuset}em1', 0x10, '/dev/sequencer2\x00'}, 0xa, '/dev/full\x00', r5, r6, r17}}, 0x99) [ 271.688705][T12938] IPVS: ftp: loaded support on port[0] = 21 11:18:21 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) close(r3) socket$isdn_base(0x22, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r7, 0x80}, {r7, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x80000000005000, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r10, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000300)={0x50000015}) fcntl$getown(r6, 0x9) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r11}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') 11:18:21 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x0) 11:18:22 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:22 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r4, 0x0) [ 272.089186][ T391] tipc: TX() has been purged, node left! [ 272.104171][T12956] device nr0 entered promiscuous mode 11:18:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 272.316383][T12962] IPVS: ftp: loaded support on port[0] = 21 11:18:22 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x200101, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r4, 0x0) 11:18:22 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:22 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x100000000000) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r4, 0x0) [ 273.261262][T12962] chnl_net:caif_netlink_parms(): no params data found [ 273.356936][T12962] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.364246][T12962] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.373177][T12962] device bridge_slave_0 entered promiscuous mode [ 273.417799][T12962] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.425130][T12962] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.433921][T12962] device bridge_slave_1 entered promiscuous mode [ 273.519627][T12962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.569402][T12962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.638646][T12962] team0: Port device team_slave_0 added [ 273.660197][T12962] team0: Port device team_slave_1 added [ 273.848841][T12962] device hsr_slave_0 entered promiscuous mode [ 273.956359][T12962] device hsr_slave_1 entered promiscuous mode [ 274.054979][T12962] debugfs: Directory 'hsr0' with parent '/' already present! 11:18:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000080)={0xb}) 11:18:24 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) close(r3) socket$isdn_base(0x22, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r7, 0x80}, {r7, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x80000000005000, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r10, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000300)={0x50000015}) fcntl$getown(r6, 0x9) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r11}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') 11:18:24 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 274.123047][T12962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.274986][T12962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.327604][T12962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.401942][T12962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.538364][T12985] device nr0 entered promiscuous mode [ 274.641624][T12962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.664686][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.673837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.692528][T12962] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.712122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.722098][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.731198][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.738392][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.752724][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.761803][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.771371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.780826][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.788021][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.801950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.820021][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.845196][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.855815][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.865507][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.875531][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.902005][T12962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.912911][T12962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.951104][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.960579][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.972944][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.982893][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.992553][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.138744][ T2786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.155475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.163225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.182950][T12962] 8021q: adding VLAN 0 to HW filter on device batadv0 11:18:25 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:25 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400080, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r3, 0x0) 11:18:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_NF_CALL_IP6TABLES={0x8, 0x25, 0xf3}, @IFLA_BR_NF_CALL_ARPTABLES={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x7}]}}}]}, 0x4c}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 11:18:25 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) close(r3) socket$isdn_base(0x22, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r7, 0x80}, {r7, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x80000000005000, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r10, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000300)={0x50000015}) fcntl$getown(r6, 0x9) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r11}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') 11:18:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000006b3be80eab5a9600", @ANYRES32=0x0, @ANYBLOB="000000000000000000080010000500"/24], 0x30}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r4, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46e7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f7}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x208, r4, 0xf53e9618d32e7061, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf8e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2ea1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x15d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff132}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x35f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9338}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98e1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x2, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x53}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) [ 275.641567][T13008] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 275.650122][T13008] netlink: 'syz-executor.2': attribute type 38 has an invalid length. [ 275.658477][T13008] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 11:18:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x17, 0x1, 0x2000}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000780)=""/137, &(0x7f0000000340)=0x89) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000004c0)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x8eb}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.739993][T13014] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 275.748487][T13014] netlink: 'syz-executor.2': attribute type 38 has an invalid length. [ 275.756890][T13014] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 11:18:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 275.797475][T13015] device nr0 entered promiscuous mode 11:18:25 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r3, 0x0) 11:18:26 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="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", 0x1000) unshare(0x20400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)) r2 = socket(0x22, 0x80002, 0xffffffff00000026) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x1) 11:18:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 276.139574][T13027] delete_channel: no stack [ 276.149257][T13028] delete_channel: no stack 11:18:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a8000000100001000000000000000000000000000e27c77475f426fe115b504a527b9ccaf6c20fcc702ce577944bb15bf4de46d5ae8066ab521027951d791bbbecdb51f3cf8fc4c71468d94cc425a615de97abe5b7cc14396461b8168056d3d660f2d9593c11250d5fd9dbc07f540a272da31ca6ecd5c95d2d627f4c9450197c3959924beff4f17929539ad691ba44a36388e525981622507a630f9cb0451d00", @ANYRES32=r1, @ANYBLOB="000000000000000008001300", @ANYRES32=r3, @ANYBLOB="80002b007c000100"/72, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="080000000000000000000000000000001000"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, 0x0) 11:18:26 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) 11:18:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x10000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0xfffffeff, 0x0, 0xac5f553a4fbefe3c, 0x0, 0x8, 0xc3dc, 0x800, 0x1}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmmsg$inet6(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c) [ 276.539126][T13036] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:26 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r10}}, 0x10) [ 276.617264][T13045] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:26 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r2, 0x0) 11:18:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x18d03, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r2) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000180)={{0x8, 0x3, 0x7, 0x0, '\x00', 0x3f}, 0x4, 0x8, 0x9, r8, 0x2, 0xfffffff7, 'syz1\x00', &(0x7f0000000140)=['/proc/capi/capi20\x00', '\x00'], 0x13, [], [0x0, 0x7, 0xa9, 0xa7]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) close(r1) 11:18:27 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x0) 11:18:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, 0x0) setregid(r1, r2) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="001b000000000100000000000000000efc4f617cf9ce09be7521d0e30d265731e0e6c19f84a97067a0652c63e407e1a10b8491881ac52de1b258ce515cc9ec1581746744ade25938ab9336432cc11191229fe3ccb5271da208c91000000000000000000000000000000001010400000000c2040000000000"], 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 11:18:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:27 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x0) 11:18:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:27 executing program 1: io_setup(0x1, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'lapb\x01\xe2\xff\xff\xff\xff\xff\xff\xff\x00', 0x1000}) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r1, 0x0) 11:18:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:27 executing program 1: io_setup(0x1, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:28 executing program 1: io_setup(0x1, &(0x7f00000001c0)) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) 11:18:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20020}, 0x0, 0x0, 0xffffffffffffffff, 0x6) clock_gettime(0x2000000000000006, &(0x7f0000000300)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffefffc, 0x7103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x80000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x20) inotify_init1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x10000000004053a, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='smaps\x00') bind$alg(r2, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff69) r4 = dup(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x0, @local, 0xfffffffffffffffc}, 0xffffffffffffff4b) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0xd84161b7992131a) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xffea) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x1}}, 0x1) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0x163) 11:18:28 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f, 0x5}}, 0x20) 11:18:28 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2c100, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000000010000000000000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x148, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x24040050) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 11:18:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 278.284618][T13101] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:18:28 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r10}}, 0x10) 11:18:28 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket(0x10, 0x800000000000803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002e000100"/24, @ANYRES32=0x0, @ANYBLOB="00000000000000000b6a707c7cf6cd2c4896cb51c370003398f38aaee06a666d43020e9656dc2710a4d7946a93b40e7598f2caaa21fc"], 0x30}}, 0x0) 11:18:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) [ 278.605499][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:28 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x2, 0x7}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x80) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)=0x7) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000200)=""/64, &(0x7f0000000240)=0x40) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8040582}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0xa}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x34}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x35}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x4c8c4) r6 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x2082, 0x2}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_TXQLEN={0x8, 0xd, 0x2b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4008040) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = accept(r8, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000840)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000900)={0x0, 0x68, &(0x7f0000000880)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x2a}, 0x9278}, @in6={0xa, 0x4e20, 0x6, @rand_addr="a2f7cb87cd7dfbcfb8eb01ec97f3eea5", 0x146}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000980)={r11, 0xab, "b56d611eebfd3ad5fcf6f97e85ba1e047e96002e53b2bbb119230baff688c6abb0d96eb6ad3f3d9e23cdcd95c0d730be97c9349ee1ba56fe07373421d6fa154443b1e694c74abe584947d505fc5404e6dae648e71e80c970eea5c27de53871d6bede201eaa84302f8c2ab97624b6eccf2737c38c07956933f85ab4bbf17d9aa9c65592d5692fe039f853c4ff5f230dd2d6331afac2b72c61f40498352f75122ab0c261c5ceb8d1bb546926"}, &(0x7f0000000a40)=0xb3) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) recvfrom$rxrpc(r12, &(0x7f0000000ac0)=""/4096, 0x1000, 0x22, &(0x7f0000001ac0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @local, 0x7}}, 0x24) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/vga_arbiter\x00', 0x44200, 0x0) write$UHID_CREATE2(r13, &(0x7f0000001b40)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x15, 0x7, 0xf2d, 0x1000, 0x1a062ffc, 0x7ff, "a0ade781cc380d4dad8267ac5aaa0cb8a2612d512c"}, 0x12d) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001c80)=[0x3, 0xc4, 0x81, 0x0]) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000001cc0)={0x4, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e24, 0x3, 'sh\x00', 0x4, 0x100, 0x63}, 0x2c) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/null\x00', 0x4000, 0x0) setsockopt$inet_msfilter(r14, 0x0, 0x29, &(0x7f0000001d40)={@multicast2, @remote, 0x1, 0x5, [@local, @multicast2, @multicast2, @multicast2, @remote]}, 0x24) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/hwrng\x00', 0x400, 0x0) setsockopt$RDS_RECVERR(r15, 0x114, 0x5, &(0x7f0000001dc0)=0x1, 0x4) 11:18:28 executing program 1: add_key$user(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:28 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000}) 11:18:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 11:18:28 executing program 1: add_key$user(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:29 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) 11:18:29 executing program 1: add_key$user(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 11:18:29 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r10}}, 0x10) 11:18:29 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000100)="ba1810cee888ee1c8386cefa3966e41c5645ece931db5109090be9ca5e343087ff8c05cca20e75b66dd47e8e2f8037ed006d91fe8b8f811e8d450df4dcba456f7ff7b63ec7739569c42b", 0x4a, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 11:18:29 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe4, &(0x7f0000000140), &(0x7f0000000040)=0xc6) [ 279.460123][T13152] IPVS: ftp: loaded support on port[0] = 21 [ 279.787050][T13152] chnl_net:caif_netlink_parms(): no params data found [ 279.844116][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.851494][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.861214][T13152] device bridge_slave_0 entered promiscuous mode [ 279.871459][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.878721][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.887721][T13152] device bridge_slave_1 entered promiscuous mode [ 279.915890][T13152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.930092][T13152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.964527][T13152] team0: Port device team_slave_0 added [ 279.974483][T13152] team0: Port device team_slave_1 added [ 280.048144][T13152] device hsr_slave_0 entered promiscuous mode [ 280.097453][T13152] device hsr_slave_1 entered promiscuous mode [ 280.134937][T13152] debugfs: Directory 'hsr0' with parent '/' already present! [ 280.174397][T13152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.229390][T13152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.283190][T13152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.340467][T13152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.397295][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.404597][T13152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.412353][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.419518][T13152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.476635][T13152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.493208][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.503258][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.512370][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.522595][T12551] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 280.540163][T13152] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.555313][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.564370][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.571624][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.589360][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.598487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.605766][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.632499][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.649818][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.660560][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.686598][T13152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.697170][T13152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.716026][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.726425][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.738525][ T3908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.778453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.786982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.806206][T13152] 8021q: adding VLAN 0 to HW filter on device batadv0 11:18:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 11:18:31 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x2, 0x6, @dev}, 0x10) close(r0) 11:18:31 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) r2 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 11:18:31 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) 11:18:31 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r10}}, 0x10) [ 281.055605][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 281.062201][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:18:31 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 11:18:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000003000000030000005f08757ff8d53d298caf7a8baf62fb280ba6115d9f005561166f09a337ed654788c8dcd0917edecc7300000000000000067e80f5f1de5b1711b8d367485344a3d93ec5755c9e0764d6d95e1f9e5a4e4d03a8e68806"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/105, 0x69}, 0x0) 11:18:31 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10ba00, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, 0x0, 0x4000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[], 0x378) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x610901, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x500002}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x86}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7152}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4004081) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='hybla\x00\xab\x02\x9c\xd5Vp\xde\x17\xd6F\x0f\xa1B\x94\xe0\xb3R\xc7\xca-\xea\x93\x8b\xc0Q\"\x834\x9a9\bw[\x137\xf6\x9e\x06\x1b\x16\x9a\x92\x10\x96\x04\xd2\xae\xd3K\x00\x00\x00\x00\x00\x00\x00', 0x3e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) sendto$inet(r2, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) 11:18:31 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 11:18:31 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) 11:18:31 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:32 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) 11:18:32 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f, 0x5}}, 0x20) 11:18:32 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) 11:18:32 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)="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", 0x1e9}], 0x1}}], 0x1, 0x4000000) 11:18:32 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x0) 11:18:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:18:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) 11:18:32 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a8001600400002000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 11:18:32 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x0) [ 282.556295][T13252] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) 11:18:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) 11:18:32 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r8, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x50000015}) fcntl$getown(r4, 0x9) 11:18:32 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x0) 11:18:32 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f, 0x5}}, 0x20) 11:18:33 executing program 5: r0 = socket$inet(0x2, 0x805, 0x0) listen(r0, 0x7fff) sendto$inet(r0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0xfffffffffffffe42) 11:18:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) 11:18:33 executing program 2: socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="24000000140081ae08060804000f00002cff0100000000000101546fabca1b4e7d06a6bd", 0x24}], 0x1}, 0x0) 11:18:33 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x0) 11:18:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) 11:18:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='Q7\\$', 0x5, 0x1f6, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 11:18:33 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = gettid() fcntl$lock(r0, 0x26, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, r1}) 11:18:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) 11:18:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000028c0)={'ip6gre0\x00', @ifru_data=0x0}) 11:18:33 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r8, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x50000015}) fcntl$getown(r4, 0x9) 11:18:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x9}) 11:18:34 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) 11:18:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) 11:18:34 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 11:18:34 executing program 5: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)='\x00\x00\x00', 0x3) 11:18:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x105, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) 11:18:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0xce20}}}}}}, 0x0) 11:18:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500154001008178a80016000c000100e558f03003ac020000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 11:18:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) 11:18:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00\xab\x02\x9c\xd5Vp\xde\x17\xd6F\x0f\xa1B\x94\xe0\xb3R\xc7\xca-\xea\x93\x8b\xc0Q\"\x834\x9a9\bw[\x137\xf6\x9e\x06\x1b\x16\x9a\x92\x10\x96\x04\xd2\xae\xd3K\x00\x00\x00\x00\x00\x00\x00', 0x3e) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) [ 284.327425][T13350] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.5'. 11:18:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) 11:18:34 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r8, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x50000015}) fcntl$getown(r4, 0x9) 11:18:34 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004f357c10b54fe720992bf6"], 0x1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3aec}, 0x4000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x9, 0x0) r1 = open(0x0, 0x141042, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@RTM_GETNSID={0x14, 0x5a, 0x429}, 0x14}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x4, 0x6, 0x8, 0x70bd29, 0x25dfdbfe, {0xc, 0x0, 0x2}, [@generic="87518f3ec229ce6570062894895c52e75a6c02845c1916318f6afdd183ae22d2aa1bcb9d3a3cbe5ab1fad160924e4a211c285d20ce6e5980fdf3f40d38dbcf4bf827a2630d36e2c4fd796976ce"]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x24, 0x9, 0x8, 0x0, 0x0, 0x3, 0x45802, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x3}, 0x8, 0x8, 0x4, 0x0, 0x0, 0x2, 0x5}, r0, 0x9, r1, 0xd74911ef4a7e00a2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) unshare(0x40000000) [ 284.881617][T13368] IPVS: ftp: loaded support on port[0] = 21 11:18:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) 11:18:35 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000ad1000/0x2000)=nil, 0x2000, 0x9) 11:18:35 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) pipe(0x0) 11:18:35 executing program 1: socket$pppoe(0x18, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040), 0x4) 11:18:35 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3b44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003640)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 11:18:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x5}}, 0x0) 11:18:35 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000300)={0x50000015}) 11:18:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 '], 0x5}}, 0x0) 11:18:35 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x47524247}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 11:18:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 11:18:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 '], 0x5}}, 0x0) 11:18:36 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xfffffffffbffff40, 0x4) listen(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 11:18:36 executing program 2: r0 = gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000000000016) [ 286.061057][ T515] tipc: TX() has been purged, node left! 11:18:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x3af, &(0x7f00008b7ff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000001020100000006000000000002000000100002000c0001000500010000000000"], 0x24}}, 0x0) 11:18:36 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) 11:18:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 '], 0x5}}, 0x0) 11:18:36 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xfffffffffbffff40, 0x4) listen(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 11:18:36 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000300)={0x50000015}) 11:18:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'], 0x5}}, 0x0) [ 286.995308][T13434] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:18:37 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xfffffffffbffff40, 0x4) listen(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 11:18:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04630440000000000e630c40"], 0x0, 0x20000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c"], 0x0, 0x20000000, 0x0}) 11:18:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 11:18:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'], 0x5}}, 0x0) [ 287.269939][T13450] debugfs: File '13447' in directory 'proc' already present! 11:18:37 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xfffffffffbffff40, 0x4) listen(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 11:18:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}}, 0x0) 11:18:37 executing program 5: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x20}, 0xc) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880)=@xdp={0x2c, 0x0, 0x0, 0x22}, 0x80) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 287.525833][T13461] netlink: 'syz-executor.2': attribute type 21 has an invalid length. 11:18:37 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r6, 0x80}, {r6, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x80000000005000, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r9, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000300)={0x50000015}) fcntl$getown(r5, 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x6011}) 11:18:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'], 0x5}}, 0x0) 11:18:37 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) 11:18:37 executing program 1: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x72, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x2, &(0x7f0000000000), 0x8) 11:18:37 executing program 5: r0 = eventfd(0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ffffffffffffffff", 0x8}], 0x1) 11:18:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}}, 0x0) 11:18:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="80", 0x1}], 0x1) [ 287.831814][T13482] netlink: 'syz-executor.2': attribute type 21 has an invalid length. 11:18:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/87, 0x20) getdents64(r1, &(0x7f0000000200)=""/198, 0xc6) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0x2cc}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:18:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}}, 0x0) 11:18:38 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 288.094699][T13501] netlink: 'syz-executor.2': attribute type 21 has an invalid length. 11:18:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:38 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r8, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000300)={0x50000015}) fcntl$getown(r4, 0x9) 11:18:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}}, 0x0) 11:18:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) r2 = userfaultfd(0x0) close(r2) 11:18:38 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) [ 288.658362][T13519] netlink: 'syz-executor.2': attribute type 21 has an invalid length. 11:18:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:38 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000000)={0x3, 0x1, 0x80, [], &(0x7f0000000140)}) 11:18:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x5, 0x40, 0xfa00, {{0x6000000, 0x4e20, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4}}}, 0x48) 11:18:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:41 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x80000014}) 11:18:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/87, 0x20) getdents64(r1, &(0x7f0000000200)=""/198, 0xc6) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0x2cc}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:18:41 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) 11:18:41 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000300)={0x50000015}) 11:18:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/87, 0x20) getdents64(r1, &(0x7f0000000200)=""/198, 0xc6) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0x2cc}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:18:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, "f501bb308d87ada10c801f03a2a7eb8071e36dc635a09d97a2b18ff420062e8e"}) 11:18:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x80a, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local={0xac, 0x14, 0xffffffffffffffff}}, @gre}}}}, 0x0) recvmmsg(r2, &(0x7f0000004d00)=[{{&(0x7f0000000380)=@can, 0x80, 0x0}}], 0x1, 0x0, 0x0) 11:18:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:41 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 11:18:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a) perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x40, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) close(r0) 11:18:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:41 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) 11:18:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a) perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x40, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) close(r0) 11:18:41 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x5, &(0x7f0000000040), 0x4) 11:18:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/87, 0x20) getdents64(r1, &(0x7f0000000200)=""/198, 0xc6) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0x2cc}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:18:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:44 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000300)={0x50000015}) 11:18:44 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 11:18:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a) perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x40, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) close(r0) 11:18:44 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) 11:18:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x20a) perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x40, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) close(r0) 11:18:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) 11:18:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x28, 0x1a, [{0x4, 0x2}, {0xfffffffffffffe2c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffdc2}]}, @IFLA_GROUP={0x8}]}, 0x50}}, 0x0) 11:18:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) [ 294.963825][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.055867][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.068045][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.216598][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.230318][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.238112][T13642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:18:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x28, 0x1a, [{0x4, 0x2}, {0xfffffffffffffe2c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffdc2}]}, @IFLA_GROUP={0x8}]}, 0x50}}, 0x0) 11:18:47 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r7, 0x0, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000300)={0x50000015}) 11:18:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) 11:18:47 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) 11:18:47 executing program 5: socket$inet(0x2, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) unshare(0x20600) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000000), 0x0) 11:18:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) [ 297.528432][T13658] debugfs: File '13656' in directory 'proc' already present! 11:18:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETX(r1, 0x5433, 0x0) [ 297.588059][T13662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.602770][T13662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.612542][T13662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:18:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f00000016c0)=""/76, 0x4c}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 11:18:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)="601de2a0a045d8fbf4cc42ec42161e9bfaf9f609df8191a3557798e30bb7d66dd627fb9384b3bfa158ecd4dae7f52c23a2f5d07d6b5e23601f57de2ac0eb886dba737c66a28809c8fffa400eb0613e8467c00501711eb4058a29d94b07e99400ebff2ddd17e0aa144693bc6c16b887c843da741015e4fbdb182f3f6f2d32100201273aa5d6867cc37f68dd26f217cf8ac7054318a4e772d920df9f8a20c52d2e4912894762d8984026146d9d51b365d73a4ecaf0978a11714158afb06398952c023b54bb4a4929c91b8312d13d347fe342f6af6d22e5b51890c2156bed03a84732b03233fdeed01ae89560fab7e1c426a6d2a8ed876148d096d008b6a21757295a24b4fcb77394d7e838dd4f5c00058574b409d919c6b3510708168da981a3336427a2c43787dd7259dec2a9521d35de49ea18a82b07520ad9d6fe5fb1c90b330d0febc3a587c9cfaf8c2dc29f4e3e62c453331f6d402b78f37795b709c304cd6bd61acbf95c337034cc9ed34138d945bd5deb316d43636fc77aff316aecbedb900cbe3e830690d6f0a3e062bb62ca32995561449edf6fa2dbc843363710a88d139aad0ebf4c308cfd8ccb7e14b24d6fe63fe14d2a646e30ea21a6a9902a067c12892086b69a4d387e8884876ebe7fae269a52937e1e1dacae46d6f6c26b70889db2a61bfd5ec354a012cf5ad3af30a08134d80fa365ed0b9eb6c14929b7d003ef9ec3ee4c0a785d28263215396b0846e1d7bb9b4285139344abed66a5bc00691fd682eda43b3f7818d082a9141d0df9ccc85788bd8bd2c0b1cc9bfebef011f8f5cb73f49450814b790101ff926f0c5bd9e19266780713f0895487d39320219e7fa7f4d464463b1f443563d8ce275effc761dffa4d8a0089e7ccafa98b18a6b06db8f16fe52de4bb5b9b54e626970f61d1618a299da666b02dcecda04d44cf85a515bb04cca7a76f9d1bd7f3977594104d189c1f2d7351bab6d6d7d268a8b2386f131cf82dd578b4c3a68dbd6118f34956869a366ab2756567bef7b1b97fc081d660402819fbe29c148b6dc90d92f6378ee0ca4b027037e3333f9df01f00de7ab20a7b3ae83ca5141f0b5312fd8e8e0a51ba8f5b785d7cbab6d8d795adcf970b81359206e56c4f2e16577c2a9a25a04360cf43a5d25953d03b2e3c70adbc6440aafffc55778ea5ba5612c752e08316b7cb9db9fb56dc21171b81b8a417ea99667f8ede49d90cdffc2967a3e3d498a5955289800d9a179743285ac30d59715bc326692617822afd5968aa7501c7c0f6f09a85611c773737be925afb05b031ca1c70bc242fb06676153d5b916def8ca693d9d9352944f7209ae633d3e1b69c4300e668e4957c60e3858754aa190b41ee6f955a45893b9144402ec3d8f8a920f4845515c51d3cfa8865084720b31384b15ad637a4df08889ebe6558c2a5d9b61f09"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x28, 0x1a, [{0x4, 0x2}, {0xfffffffffffffe2c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffdc2}]}, @IFLA_GROUP={0x8}]}, 0x50}}, 0x0) 11:18:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) [ 298.176795][T13685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.262821][T13685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.274610][T13685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:18:48 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r8, 0x0, 0x0, 0x3) fcntl$getown(r4, 0x9) 11:18:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000004200c5caa6c9ef61cbaba520192abd7000fbdbdf2500000000"], 0x14}}, 0x0) 11:18:48 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) 11:18:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4ef27f454c4600000033006c00000000000000000144030503000000000038000000000000000000000000002000"/56], 0x38) 11:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x28, 0x1a, [{0x4, 0x2}, {0xfffffffffffffe2c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffdc2}]}, @IFLA_GROUP={0x8}]}, 0x50}}, 0x0) 11:18:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:48 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, 0x0, 0xbdf) 11:18:48 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fcntl$getflags(r0, 0xb) [ 298.744306][T13702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.834206][T13702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.846037][T13702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 11:18:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:49 executing program 5: socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x20008844) 11:18:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x80000104, 0x0, 0x0, 0x0) 11:18:49 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) epoll_wait(r8, 0x0, 0x0, 0x3) fcntl$getown(r4, 0x9) 11:18:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r0, 0x10e, 0x8000000009, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) 11:18:49 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) 11:18:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:49 executing program 2: r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x90000810) dup2(r1, r0) 11:18:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000010100000006000000000002000000100002000c00010008000100000000e2"], 0x24}}, 0x0) 11:18:49 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000300)=@get={0x1, 0x0}) 11:18:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 11:18:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x6, 0x4, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x3c) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) 11:18:49 executing program 2: r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x90000810) dup2(r1, r0) 11:18:50 executing program 2: r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x90000810) dup2(r1, r0) 11:18:50 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) fcntl$getown(r4, 0x9) 11:18:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:50 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) 11:18:50 executing program 5: r0 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) exit(0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 11:18:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt(r0, 0x0, 0x1, &(0x7f00000001c0)='k', 0x1) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="020325bd7000fb9f5b06ef4bb303a900020008000200cdbe0000080001000101000004000400080002"], 0x1}}, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) 11:18:50 executing program 2: r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x90000810) dup2(r1, r0) 11:18:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x5}}, 0x0) 11:18:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:50 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071b", 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xd4c, 0x400, "8b80ed521ca7182d8cbd32cbcd1de3fe0c7859778b51ef4a6bd1932ba31c511d97c83f428636a7296f26e7450a3dd0fcb68e0f102bd0c439c604777b6d75df6e35237496e2d6a9045b67dce8b1c1f8e3549c397a56b19f29e2db70db8f3c521fa8f577c50e92b657988d004e0cc19e192d8fe7e65ef5c753cb34d1ae1e5cfcb331c24a3d0d65f77e6e9851"}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:18:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/115, 0x73) 11:18:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) [ 300.602128][T13804] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.635172][T13804] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:50 executing program 1: unshare(0x2000400) r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, 0x0) 11:18:50 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) fcntl$getown(r4, 0x9) 11:18:50 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071b", 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xd4c, 0x400, "8b80ed521ca7182d8cbd32cbcd1de3fe0c7859778b51ef4a6bd1932ba31c511d97c83f428636a7296f26e7450a3dd0fcb68e0f102bd0c439c604777b6d75df6e35237496e2d6a9045b67dce8b1c1f8e3549c397a56b19f29e2db70db8f3c521fa8f577c50e92b657988d004e0cc19e192d8fe7e65ef5c753cb34d1ae1e5cfcb331c24a3d0d65f77e6e9851"}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 300.931722][T13818] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.984578][T13818] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:51 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) 11:18:51 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7311000000009b12c330ae2c08f5193a5be3e360647b65f9fa"], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 11:18:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) 11:18:51 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={'crct10dif((((\x00'}}) 11:18:51 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071b", 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xd4c, 0x400, "8b80ed521ca7182d8cbd32cbcd1de3fe0c7859778b51ef4a6bd1932ba31c511d97c83f428636a7296f26e7450a3dd0fcb68e0f102bd0c439c604777b6d75df6e35237496e2d6a9045b67dce8b1c1f8e3549c397a56b19f29e2db70db8f3c521fa8f577c50e92b657988d004e0cc19e192d8fe7e65ef5c753cb34d1ae1e5cfcb331c24a3d0d65f77e6e9851"}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:18:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) [ 301.292716][T13837] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.307296][T13837] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. 11:18:51 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071b", 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xd4c, 0x400, "8b80ed521ca7182d8cbd32cbcd1de3fe0c7859778b51ef4a6bd1932ba31c511d97c83f428636a7296f26e7450a3dd0fcb68e0f102bd0c439c604777b6d75df6e35237496e2d6a9045b67dce8b1c1f8e3549c397a56b19f29e2db70db8f3c521fa8f577c50e92b657988d004e0cc19e192d8fe7e65ef5c753cb34d1ae1e5cfcb331c24a3d0d65f77e6e9851"}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:18:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) [ 301.468501][T13849] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.486037][T13836] could not allocate digest TFM handle crct10dif(((( [ 301.500188][T13849] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.549469][T13836] could not allocate digest TFM handle crct10dif(((( 11:18:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x701, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) 11:18:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 11:18:51 executing program 4: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r5, 0x80}, {r5, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x80000000005000, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) fcntl$getown(r4, 0x9) 11:18:51 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6802}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc4f, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffd1}, 0x48) 11:18:51 executing program 3: r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="effb28263d32414c402f6e350cd977", 0xf, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) socket$isdn_base(0x22, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{}, {r4, 0x80}, {r4, 0x3105}, {}], 0x4, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x80000000005000, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, 0x0) 11:18:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x4}}, 0x0) [ 301.955873][T13865] ===================================================== [ 301.962884][T13865] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x194/0x410 [ 301.970608][T13865] CPU: 0 PID: 13865 Comm: vhost-13864 Not tainted 5.5.0-rc1-syzkaller #0 [ 301.979022][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.989118][T13865] Call Trace: [ 301.992532][T13865] dump_stack+0x1c9/0x220 [ 301.996889][T13865] kmsan_report+0x128/0x220 [ 302.001400][T13865] __msan_warning+0x57/0xa0 [ 302.005984][T13865] __list_del_entry_valid+0x194/0x410 [ 302.011357][T13865] kcov_remote_start+0x13e/0x2e0 [ 302.016344][T13865] vhost_worker+0x373/0x690 [ 302.020851][T13865] kthread+0x4b5/0x4f0 [ 302.024914][T13865] ? vhost_dev_set_owner+0xd80/0xd80 [ 302.030200][T13865] ? kthread_blkcg+0xf0/0xf0 [ 302.034823][T13865] ret_from_fork+0x35/0x40 [ 302.039231][T13865] [ 302.041541][T13865] Uninit was created at: [ 302.045772][T13865] kmsan_save_stack_with_flags+0x3c/0x90 [ 302.051385][T13865] kmsan_alloc_page+0x133/0x320 [ 302.056223][T13865] __alloc_pages_nodemask+0x1421/0x5fd0 [ 302.061842][T13865] alloc_pages_current+0x68d/0x9a0 [ 302.066937][T13865] __vmalloc_node_range+0x8c9/0x1270 [ 302.072205][T13865] vmalloc+0x106/0x120 [ 302.076272][T13865] kcov_remote_start+0x18e/0x2e0 [ 302.081193][T13865] vhost_worker+0x373/0x690 [ 302.085682][T13865] kthread+0x4b5/0x4f0 [ 302.089732][T13865] ret_from_fork+0x35/0x40 [ 302.094125][T13865] ===================================================== [ 302.101035][T13865] Disabling lock debugging due to kernel taint [ 302.107181][T13865] Kernel panic - not syncing: panic_on_warn set ... [ 302.113865][T13865] CPU: 0 PID: 13865 Comm: vhost-13864 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 302.123659][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.133711][T13865] Call Trace: [ 302.137021][T13865] dump_stack+0x1c9/0x220 [ 302.141346][T13865] panic+0x3c9/0xc1e [ 302.145254][T13865] kmsan_report+0x215/0x220 [ 302.149753][T13865] __msan_warning+0x57/0xa0 [ 302.154251][T13865] __list_del_entry_valid+0x194/0x410 [ 302.159618][T13865] kcov_remote_start+0x13e/0x2e0 [ 302.164642][T13865] vhost_worker+0x373/0x690 [ 302.169156][T13865] kthread+0x4b5/0x4f0 [ 302.173213][T13865] ? vhost_dev_set_owner+0xd80/0xd80 [ 302.178693][T13865] ? kthread_blkcg+0xf0/0xf0 [ 302.183286][T13865] ret_from_fork+0x35/0x40 [ 302.189264][T13865] Kernel Offset: 0x24e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 302.200925][T13865] Rebooting in 86400 seconds..