949892a0db7c7ecaaa88656ddfa7b6bab6587ab7575444e29b09632d2cae7fcb129c9c7522bf6862b8759693be1b") 12:58:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x0, 0x1, @raw_data=[0x6, 0x3000, 0x5, 0xe56, 0x0, 0x7, 0x3, 0x7, 0xffffffff, 0x81, 0x62f, 0xa0000, 0x4, 0xff, 0x5, 0x1]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x8b) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101002, 0x0) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000180)={0x2, 0x200, 0x400}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/114) 12:58:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000fffe140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000fff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000088a8ffff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000007fffffff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000009effffff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000efffffff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d90d00000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:58:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000f0ffffff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:59 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x800}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000000c0)={0x5}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b40, &(0x7f0000000000)) 12:58:59 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000002080)=@builtin='builtin_trusted\x00') r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000002080)=@builtin='builtin_trusted\x00') r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000002080)=@builtin='builtin_trusted\x00') keyctl$negate(0xd, r3, 0x401, r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)="f4e20a740921e77f4c90557bdcbebf103f00000000000000719d4837846417beb492325fef1a6fa65b510ff628fb1d8cae8ca6") 12:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r4 = gettid() ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x244, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xe995}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1b5d}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x5c}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xccaf}, {0x6, 0x16, 0x7fff}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}]}, 0x244}, 0x1, 0x0, 0x0, 0x51}, 0x20008800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340)='NLBL_UNLBL\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000004c0)={[{0xfffffff8, 0x7f, 0x6, 0x7, 0x40, 0x1, 0xff, 0x3, 0x4, 0x4, 0xfb, 0x5, 0x1000000000000}, {0x5, 0x7f, 0x40, 0xff, 0xbc, 0x2a, 0x0, 0x1, 0xff, 0x1e, 0x7f, 0xfd, 0x4}, {0x9, 0x5e, 0x5, 0x0, 0x1, 0xe4, 0x8, 0x0, 0xff, 0x3f, 0x1, 0x3f, 0x4}], 0x100}) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100027a19014ce7f9ebd7000fbdbdf250300000008000500ac1414aa08000400ac1e000108000400ffffffff14000200fc010600000000000000000000000001050001000000000014000300fc020000000000000000000000000000050001000000000028f6e8e3f54b1261400be9755feefb1f23c288df40579e490225e824a712b5ccd3312ebacec4a320f3c13ed20ded41b439ea85d76bf41d8bcecc6dab208d44fb1d27ccefc871c058db47eeac6111786c987cab"], 0x64}, 0x1, 0x0, 0x0, 0x4808}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="908f8dcae4558143fc68df", @ANYRES16=r6, @ANYBLOB="000125bd7000000000000000000008000400ac1414bb14000300fe8000000000000000000000000000aa14000200fc02000000000000000000000000000114000600626f6e645f736c6176655f300000000014000300fe80008cb1b3d4f67f2d94000000003314000300fc01000000000000000000000000000014000200fc0200000000000000000000000000012800070073797374656d5f753a6f626a6563745f723a706f7765725f6465766963655f743a7330001400030000000000000000000000ffffe0000001"], 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc3, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x80400c0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0xbc, r6, 0x10, 0x70bd2a, 0x25dfdb7c, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x35, 0x7, 'system_u:object_r:systemd_passwd_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:hwdata_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4044841}, 0x1400c080) 12:58:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000010012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000040012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$smackfs_change_rule(r0, &(0x7f0000000000)={'**\\):#', 0x20, '@.%', 0x20, 'rwatl', 0x20, 'rl'}, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b40, &(0x7f0000000000)) [ 1154.294061][T14176] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 12:58:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000020000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000030000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:58:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000040000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000050000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x3f, 0x6d7, 0x0, @private2={0xfc, 0x2, [], 0x1}, @local, 0x80, 0x0, 0x1000, 0x6}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) close(r1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'nr0\x00', 0x2}, 0x18) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockname$netrom(r2, &(0x7f0000000040)={{0x3, @default}, [@remote, @null, @remote, @default, @remote, @null, @netrom, @null]}, &(0x7f00000000c0)=0x48) ioctl$PIO_FONT(r0, 0x4b60, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 12:59:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:00 executing program 5: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)) 12:59:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000060000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) finit_module(r1, &(0x7f0000000000)='^-)\x00', 0x2) 12:59:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000070000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000080000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000090000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000a0000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/183, 0xb7}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/57, 0x39}, {&(0x7f0000000500)=""/169, 0xa9}], 0x2, &(0x7f0000000600)=""/57, 0x39}, 0x8}, {{&(0x7f0000000640)=@rc, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/254, 0xfe}, 0x1}, {{&(0x7f00000007c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f0000000880)=""/75, 0x4b}], 0x2, &(0x7f0000000940)=""/162, 0xa2}, 0x3ff}], 0x4, 0x1, &(0x7f0000000b40)={r2, r3+10000000}) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000b0000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:02 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:02 executing program 4: prctl$PR_SET_ENDIAN(0x14, 0x1) 12:59:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9818bdad9fba195e871f343aefd52d35c6b5360f054cd0e6e385c739af3b6840fe6256b786c045bf76b2d17d1c73851c6bc211587f5db27e498a45dc9af80620f2cf70990fafcc4d7e8589a11cc0c5bde1adcb5849d723132c346b0932fcdbe11b0b169674e92d447567662987b11e606754884f7a23d1b5d5f8fbba8dac302265aec551c7483784a0e68d7ef885fffc834a871ae01b840d41228169c782644c37f1dbc8be206aecefff8c5d6410a3ad36b07baa313ef2ca3f5eb28c6a6b278b830d606cf9bcfe82e84309adaa9e1921f20238793eea23ab4ca80a05091e5bf2e5f2e41be78b4d9e2f19b6"], 0xfffffd88) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x10001, 0x0, 0x5, 0x3}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000c0000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 12:59:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000d0000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000e0000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000f0000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000100000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000110000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000080)=""/251, &(0x7f0000000180)=0xfb) ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f0000000000)=0x200) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:04 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x28482, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4400, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x2, @tick=0x3, 0xff, {0x3f, 0xb4}, 0x8b, 0x2, 0x6e}) ioctl$PIO_FONT(r1, 0x4b60, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') 12:59:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e23, 0x85, @dev={0xfe, 0x80, [], 0x30}, 0xa87}}, 0x1e8, 0x3, 0x4, 0x7fffffff, 0x2, 0x0, 0x3f}, &(0x7f0000000300)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) io_setup(0x1, &(0x7f00000004c0)=0x0) io_pgetevents(r6, 0x6, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x0, 0x3938700}, 0x0) io_pgetevents(r6, 0x1f, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x100]}, 0x8}) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x3) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000000)) 12:59:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x880c0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000001c0)) ioctl$SNDCTL_FM_LOAD_INSTR(r3, 0x40285107) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000100)="26e7062593c945a90494f76eebd9ecb086a02c7bf00ff08e5fd0880cf41f00000000000000e7aef023277775d05532abdaaf384778dc5db05772706e4f279d5b8a44262e6c12f20d3535f7789ac01d813a699386e8040827f0a163310b0000") r4 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x8, 'sit0\x00', {'gre0\x00'}, 0x1}) ptrace(0x10, r4) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 12:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000120000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000250000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000320000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000600000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000d10000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000300140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 12:59:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x58200, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/209) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x2) 12:59:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r3, 0x0, r2, 0x0, 0x4ff5d, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000003c0)=r5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={r5, 0x0, 0xffffffffffffffff, 0x3f, 0x80000}) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000000c0)={0x0, 'vlan1\x00', {0x62}, 0x7}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000340)={0x0, 'batadv_slave_1\x00', {0x210000}, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r5, 0x0, r6, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r4, 0x401}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r5, 0x81, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r5, 0xfffffffffffffffc, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r5, 0x3, 0x80000000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000000)={r5, 0xfffffffffffeffff, 0x1ff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r5) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000002e0300140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000140)="049634a5a2a911afba8126166f9a01d6fe693eb7dc5638620fc41e6331216b880f8ce6a5dc6648888c79528a36a5800b3ad0e254c247d6a6d87975579cd181b018d6b2a5b609ccafbefb0fd4d384cebc77c73263885bae3034a3a259587d82f8ea005585792cd1e1f830147342a205932285fad4379b8b3c7ed921f0dcbc3fbf7c72b14fedd66535e70910a48f26cc4e5442caa9c62873289a") setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl(r4, 0x7, &(0x7f0000000080)="e537fe189d6edce9849f64c16b0e6cceb31635666c9df1ffb599ec8d451c9a946b7a7c29328a686684efd485ad68c74462bf20fd7033250bf4b6d9718a037ad72ea51f1cd87f57fa6ebc75799f86e8e4496ee03bac514326fd8d775c3dee6c702556d988ea0223e6e608cbc746907efce06d8b06472e4a56ca55dfceb9de704dc2216038b8306ec781fd933cac9bf588ec3010121f8ebb73ff4844f007") ioctl$TCGETS(r3, 0x5401, &(0x7f0000000000)) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) 12:59:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000610300140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000500140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)="2ffd7a4818c673e99d7aa4f65ae0c6b4ee792a632e50ac5fb9a08f740016ce66") 12:59:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000600140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000700140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:07 executing program 3: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000001c0)=0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x5) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)="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") socketpair(0x0, 0x80000, 0x1, &(0x7f0000000200)) 12:59:07 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80001, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/mnt\x00') splice(r0, &(0x7f00000000c0)=0x7, r3, &(0x7f0000000140)=0x2, 0x1, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r5, 0x4b40, &(0x7f0000000200)="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") 12:59:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x81, 0x1}, 'port1\x00', 0x44, 0x48, 0x7fff, 0x400, 0x6, 0x0, 0x6, 0x0, 0x1, 0x7}) 12:59:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xc0582, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000180)="2ee167096ba7ba016ee7732071f2c4becb30e6737eb8eb7cc0119a8cc37defa05d17749a630ac7e1c046e95c3c21018d20d71f423ded0d5152c721c221215817174c728a0b77b2a7d0759756e78123f34b615ea847e3f98e66b0e42b2a21500169180e", &(0x7f0000000200)=""/55, &(0x7f0000000240)="f06e0a80fa423581f472ffb28de4ad750083186643c6bbf62e1f2f88197c", &(0x7f0000000280)="98b4f69410c4bcc667135cc901578dde788dced6dad435f62fa578e40b919689ea40fc9f05aafe67ad5ea09d33791b082337de02bcaa88a07c74dc27f0ebc2c2d27c08b563", 0x0, r1}, 0x38) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000480)=@dstopts={0x0, 0xf, [], [@enc_lim={0x4, 0x1, 0x10}, @padn, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x7, [0x5, 0x7fffffff0000, 0x3, 0x9, 0x80]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0xea, 0x3f, [0x4, 0x1c000000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @hao={0xc9, 0x10, @mcast2}]}, 0x88) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX], 0xfffffd88) r5 = fsmount(r2, 0x1, 0x3) write$vhost_msg_v2(r5, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000000)=""/185, 0xb9, &(0x7f00000000c0)=""/47, 0x3, 0x4}}, 0x48) 12:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000900140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000001c0)={0x3ff, 0x59, 0x28001, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r4, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r4, 0x101, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x36}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x84}}, 0x4000) 12:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000a00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000b00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1162.115937][T14377] QAT: Invalid ioctl 12:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000c00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000d00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000e00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="010000007c0721d711fa59888485c24e1c51ca9d84a1fc918c2de9177eb9d53e6bae1845b352e8ae7a249f2cca8a6828259e3b9c0df05748a2eb2281239096fa2dec50cde48a50d26190255ccb96ab34cfed49b420df9555c1663e3b4ac0a90680e9b1d4040b96b4217f1ff39c71fdd1a273bb014a43d2eec2826ef7bc0726d1463d9b6a8852d886d0a21ed0e65001a4c785962e4f57d7"], &(0x7f00000001c0)=0x6) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x94, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x0, 0x1, 0x2e}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x1, 0x3c}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x1000}], 0x1e, 0x0, &(0x7f0000000040)="03c13cf7a658600cdf0850a35d139bec7ef68466d53e159a77fef768697a"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffffff61b) 12:59:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) dup3(r0, r1, 0x80000) 12:59:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)="a72478ff4399cad9dde83d048a03b3c324e6d045bbbe2d62b9365a0e95791fc43627ba7c9ff7dcb93a250018237a086141b603e1559039b0aaf87d0b5c703b45abefb6303d8bc13671eea08b3a83f4912320baef02baec8b92") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 12:59:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x81]}, 0x8, 0x80000) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) 12:59:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000f00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000001100140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000001200140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000002500140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:09 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) pwrite64(r1, &(0x7f0000000000)="94b6fd1cbc261106583e97b5033f03573d424365926acb95c53b1fb43ce1ba03279c86d89269d190ae170067b3684a6746fead343aa2b80763e3dfcb035591d791048a0205124130da64144839f5e24819ecd1c0b3a4c1c96258d13d929e4dd53b3dadd2af4f5123e57e482a326370df97a6d9ebd9f85db335d7d7c55990b9538c11d16b3d97bb20ac797f90502fa20ed85ae1639b7b7efe4122f5f5ff082ab230c362e00db79de5240f0486a4b42eff545a0ae2d9f4813031e16171bcea9c88e8983b478033b9e34ace09bb71c323e9389be775c0934cb0c7f0ebe32f66078b317219b3cb89ca310b3d7c06fe5b6659bb63", 0xf2, 0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000032e00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000003200140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x66, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5, 0x7f, 0x101, 0xfff}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, &(0x7f0000000140)=0x84) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)="13a5378c82528fdf78991d3d1d281a342ff5866986ba0faafacf177802a0398adaa5e8eef134c00ba39378cab44693714d4d1282a99136a86aab5be490404f78a31f7c4c643dcc8f5d8f60013e6047b2e16a3c91b030cadc9803923877513cf7ffcc05cba6659a86bcfed188632c2e026f1fedbd1819e4d229e443680913") 12:59:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000003f00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 12:59:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)="3585a4c47bd957e6bcaa48735eac3ba65f9d7b4b00c4c77894d921a459d677a92a4bc22495e4c563edb03b5b2c98d7920ef6c6f45088277f05e1742188b94968f736fd1e88f1134d36294aa1df1e") 12:59:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000004000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:10 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x22180, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/238) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$char_raw(&(0x7f0000000880)='/dev/raw/raw#\x00', 0x1, 0x200800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x364, r4, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x45, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x364}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2fc, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb24}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "27bb5e500a368d0d45dcb0be53df7e53bfadae5afd8cef8f4c7184cb1190c476"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x94, 0x3, "11a54c2c75edc13931b8f3cb95c3bbdc3df2525262a563d0de38d47295bae68d155aa925734606b51c0e9541131afd4e9838fc4dd3a5481f0cec4740fd941354f16250dd254392327bf6871319a470258ac6036da10c6001836d52d12a895b74384e95abf806da79fbd2647b63ccc424c5632e40908f8f2f0f7698c2639b83c6d1e176c9017c615fb967a37a50cbdd86"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3a, 0x3, "e9409395ed27064e7f0ff60d86a808a80f10e8fbd9d61dfd67181f2ee0bd09f35ae4831ed6791d37a1e099891a5e384f77d21350e53c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9a, 0x3, "291f6081f9a32e1816fd1429b4178bd7d9331ce87116cebf02f64a759e00cdfd0ed8221325c0e680e18341d69140469261e3810bc6acc6042586792bfda221d21b70e9075f4d35c49bf1e3aaab0aa3b43f513ce61bb50a5f41e0c19b30bc54ca2c669c3dbed62d523d75e6df02dca36f13b1bfcba2db5cf434da95886a18d852e8a5bc2fbeabf786f3e108c0ce096e8d082fca7061ca"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x62}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x465c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf030}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f86380}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x2fc}}, 0x8000) ioctl$PIO_FONT(r1, 0x4b40, &(0x7f0000000000)) 12:59:10 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f00000000c0)="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") 12:59:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCCBRK(r2, 0x5428) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x4, 0x2, 0x9}) 12:59:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000884700140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:11 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000080)="c305ca28d4e612b815134a9231212bbab4f315a8ecf715b706e2e64e9308294c94df34e6c4cb7a0d037810848aef80a2ff0a77268125451bc32009e32341791c0a9dff4ea137c1e1bce427aa44bfb33fa65b854624b42ad31882ea40d14ab35fe1ed4e2f74b5e20f817dbfea762dc24a299e64549998e7102f1499b28dd12cbd2bc96b92dacbda4bb59af9") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4a0000, 0x9) ioctl$TIOCSBRK(r2, 0x5427) 12:59:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 12:59:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x30, 0x3, 0x5}, 0x39}}, 0x18) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x8}, {0x1, 0x199}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x1, 0x80, 0x0, 0x3ff, 0x7, 0x1}, @ipv6=@tipc_packet={0xd, 0x6, '\x00\x00\b', 0x194, 0x6, 0x0, @remote, @dev={0xfe, 0x80, [], 0x29}, {[@fragment={0x1, 0x0, 0x3f, 0x1, 0x0, 0x4, 0x65}, @hopopts={0x5e, 0x6, [], [@pad1, @ra={0x5, 0x2, 0x400}, @pad1, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x20}, @hao={0xc9, 0x10, @mcast1}]}, @routing={0x5c, 0xa, 0x1, 0x1, 0x0, [@mcast1, @mcast2, @mcast1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x88, 0x0, 0x52, 0x1, 0x0, 0x19, 0x64}, @hopopts={0x3a, 0x5, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x1, [0x7ff]}}, @ra={0x5, 0x2, 0x45f}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x10}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}]}], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2, 0x0, 0x1, 0xdd, 0x6, 0x1, 0x4e21, 0x4e21, 0x0, 0x2}, [{0x8, 0x8, 0x9, 0x0, 0x9, 0x11cb5c9a, 0x7, 0x3}, {0x6, 0x0, 0x3, 0x3, 0x2, 0x9, 0xc, 0x4}, {0x806, 0x6, 0x20, 0xf6a, 0x4, 0x1000, 0x0, 0x1}, {0x3ff, 0x200, 0x92a8, 0x10001, 0x3, 0xc35, 0x2, 0x2}, {0x1ff, 0x40007, 0x6d, 0x8, 0xffff, 0x3f, 0xa, 0x7ff}]}}}}, 0x1ca) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000340)={0x9, 0x5, 0x2, 0x0, 0x0, [{{r4}, 0x4}, {{r0}, 0x3}]}) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000884800140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000655800140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000006000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000036100140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000586500140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000008100140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:12 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r2, 0x4b60, 0x0) 12:59:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000040)={0x9, 0x0, 0x42d, 0x100}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)={0x80, "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"}) 12:59:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000478800140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000002080)=@builtin='builtin_trusted\x00') keyctl$get_persistent(0x16, r3, r4) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x66, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r3, 0x2, "d1c3"}, &(0x7f0000000040)=0xa) 12:59:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000488800140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000d100140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:13 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 12:59:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000fffe00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000fff00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) chroot(&(0x7f0000000080)='./file0\x00') write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x3, 0x8}, {0x8, 0x40}, {0x3ff, 0x1ad0}, {0x3ff, 0x2}, {0x918, 0x3f}, {0xf001, 0x3}, {0x7ff, 0x1}, {0xa46}]}) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:13 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$dsp(r1, &(0x7f00000000c0)="eb75fe356cacbebeeb97926a7c584a2d67788955b4f21add71879a996f0fe7140580e28d9528cd30c5c6d6f2d3a8b0f8131f42fa30145f3e5fc89dbcc487b8d5997ea5ffc6a678d011f808ab87e8a7978fc6082373e8f2f2fa4167c39be46fa1238b03528f3e2abf7732dc404c6eac4631b2555c474d8d35ed8b", 0x7a) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x66, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, 0x4) 12:59:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000feff00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="f1a95d62fc220343e1746f60ca853308f0398f5f1ade0b097dac9d3bec2bf06bd97ca3d3c3734bddc4d0b79d6ad0ae4c570758af1f8511c50a717c14a08f00505a4b8f27c1ea839805b357fbab85e153b402844e9797c4a95a57a197b755fa49ef3bdee1ce461c21a8e6313ee7371a951bdba85548a1a1af849bbf74b84c064c324d2f3cf78029f0f196d1f5213f9d883ec4db264d6b5b6933bbd3f8a9949e7d3ee5540ef9a60c1797bda91531d7fc4a8fa9c51abefd01ef8ad45eb294e89c0138125ae08ed5b0f6941ee66932fd6ea7338d1b0bb1f1c4d0fe34983d65826eacb993866793bdec2480cc00d5a4cd45a6298e", @ANYRES16=r2, @ANYRES16=r1, @ANYRESOCT], 0xfffffd88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b6b, &(0x7f0000000000)) 12:59:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCSTI(r2, 0x5412, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x401, 0x2, 0xffffff88, 0x100, 0x0, {0x77359400}, {0x4, 0x1, 0x1, 0x23, 0x9e, 0x3f, "5355b94c"}, 0x10000, 0x4, @userptr=0x1f, 0x40, 0x0, r3}) 12:59:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)="68b499f2778213c2db7829d82c109a20232b86ea1bdf27") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRESOCT, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESOCT, @ANYRES32=r4], 0xfffffd88) ioctl$SNDCTL_TMR_METRONOME(r2, 0x40045407) 12:59:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x81, 0x20, 0xfffffff8, 0x0, 0xff, "c793b6f0d5a574892c7594690fa53648b998ad", 0x1, 0x5}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r8, 0x29, 0x1, 0x2, 0x3ff, 0x2, @private1={0xfc, 0x1, [], 0x1}, @loopback, 0x7cf, 0x700, 0x400, 0x2}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x20000804) 12:59:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000200140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000300140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000400140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000500140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000600140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000700140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x201208, 0x4) 12:59:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7ff, 0x2, 0x51, 0x546e}, {0x800, 0x9, 0x6}]}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/114) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0xe200, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x66, &(0x7f0000000000)={r6, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r6, 0x40000000}, 0x8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000000)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)={0x8ff5, 0x19, [{0xb, 0x1}, {0xc, 0x1}, {0x5, 0x1}, {}, {0xd}, {0xd, 0x1}, {0xf, 0x1}, {0x5}, {0x1, 0x1}, {0xd, 0x1}, {0xb}, {0xd}, {0xd}, {0xe}, {0xa}, {0x8}, {0x3}, {0x9, 0x1}, {0x4, 0x1}, {0x4}, {0xb, 0x1}, {0x6, 0x1}, {0x3}, {0xa}, {0xe, 0x1}]}) ioctl$PIO_FONT(r7, 0x4b6b, &(0x7f0000000040)="5f3e9a1938ad248515e6bf978550b79fe81f46708048f1cc015e8bc5ee4430e9ca0c6688e79496713a8100000060463b5e50") 12:59:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$FICLONE(r1, 0x40049409, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)={0x6, 0x9, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000080)='net/tcp\x00') write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) 12:59:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)="40a4cb5065d58d77bb4f277265a4d90d6cb44556506ec96b7f2b729ec91120a1c375d6bddec14384bf1e4c592d7ccb4510d3494cdf5e257058bd9df1be297c8ff8f48d02ddfd8980250fbae3a870c1a854badc118951860494b5f51195d1e4e490dd0a898cad8f521684dad52136b895e2c154f5ae16ff955108dfa075f2e51c") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@pad1, @pad1, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x5}]}, 0x18) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) pkey_alloc(0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x5, 0xfff7, 0x17e4, 0x5, 0x3}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x2, 0x2, 0x1, "1c01724a010981332cc9bddc6d434ef69aa089ab493aae952865ab2ad5491621", 0x34565559}) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000800140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000900140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000a00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000b00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000c00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000d00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000e00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x981) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000100)="bc96fd321714175849745b0d5f9ee084d8a99cb03f7ad10baeabbe93c8bbf7edd7bc2b17aaf0d2872a75630ccecf71ccd3648c47490b47598e0909a191741805e2e79b9992ca1deb3ea9edfd8be14648f8f9679317cd4516d786a6b23bb2022b078ff504790497e9fc59b0b63e945d6f164625ff98aa8ae9ee77147e39c30fccffb4786b3871e7c75c2518f1f74be106730273f2e7e07e26ffaacf08aca85d44d9a5e2d09a350efed94bce1270576548f4c4008ba0077c0b75fc76497b02e2f23e2553b2f19efcb4b38edbf0ba9833adcef761f07a74f8c30e44c56352092f30de76da94") 12:59:17 executing program 3: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)="93f9fbbc000000a837884c7fd5024c0000") 12:59:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0xfffffe5f, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x66, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="12000000e3f2308effecd906000000000000009e5400"], &(0x7f0000000040)=0x1a) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xa) 12:59:17 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x212000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x511080, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000240)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xd953, 0x290100) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000440)="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") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000140)="312956ee4efdcd79655b75286c8faa74506d446252a6b6e1f19db21438146690a0969f4242285659a89bb9dc00f256bfd3f92f7224feb848693d182ffbaa76f318004d30a02a94ae9940f27731084681458d9d969f3aebb92051bd82bc7ea281b0fb9e4419325f2dd1ecf09cf2309f0e33f3d40329c4eb943b1e05a7607c4214f5d06c67147201560a51a2361e4cdc084f23c04d85302f485a779f822f53fc939b500e095f7ffc424d5e44a8008286327d0f27f32b288d4b306ed6e26ead1930f706cfeb8573e27e5bf27ba8054c68653549ac227e244218c7bbb65e2ce1808a8ad5cfd91056b5d8") ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x9, 0x6, 0x4, 0x5, 0x1f}}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x0, 0x1f}) 12:59:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x80) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x5) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x0, 0x9, 0x1, 0x7, 0xf9, "e7c86357732ea45dbe20b6ee69cbc4a1ee8e78", 0x5, 0x953}) prctl$PR_GET_THP_DISABLE(0x2a) 12:59:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000f00140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000001000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000001100140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) fcntl$setown(r0, 0x8, r5) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x0, 0x0, "de2e8d033f85ea74"}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/202) 12:59:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000001200140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:19 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r1, 0x4b40, &(0x7f0000000240)="b8d24848b55ebd82edb6db86cb4a2e14b603937a8c844da9aad08f4b6fa92c0952563b92bae9bb7472c1a4712e9bd5d1b935ccd7b950c6e22e8b9a9490e0784a470361fe57bb02a9109ee8342da55c8fcae0f5000000896dc61b34392c213a285d5515b104873e172aac9f63cf8bebe07beb14aa1637b214b12f682208482e3cb984a07db3cf13c0acd6b69db886d4f4eadb3ba19047a961c92fc6bbe8220ba7ac9e885b934219d5896296a4bd885fb7cac74c48f7e62c805b08a491972d458191b03858d6fd0fc7a6d9396879c93e") 12:59:19 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000080)="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"/375) 12:59:19 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000080)="9bb74bc42f09c053c7f9230d9f9138f964bd6604bfab534a547ac972759216b89c72016e1d0beca60ad4b690952ff3ed0de3b1ac79b080836b19d9822fa3c487d5b2f3a37f0edbabe6a8506dfd4a1dee8f060000000000003706ef807e9d23195e8854efc8aab4613405c399bf832b7de8439c1313f9f317cd1d4c3b5a184a18175248fcb22af89ee49b618944f78d8b178d18ff622f4fd02095abdc139f1bb7") 12:59:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x448100, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9c0000, 0x3f, 0x6, r3, 0x0, &(0x7f0000000080)={0x9a0919, 0x2, [], @string=&(0x7f0000000040)=0x6}}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000002500140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000003200140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000006000140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000d100140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000003140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000002e03140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000025c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "d484dc436afcbb7da68c6d67177eadf07b2370ac338b9170311eb52b58b49a2bd15378cc"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b60, 0x0) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000006103140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x7f, 0x200) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000480)={0xd4, 0x7, 0x4, 0x20, 0x7fff, {}, {0x3, 0xc, 0x40, 0x1, 0x3f, 0xff, "3a3eb1a8"}, 0x3f, 0x3, @userptr=0x400, 0x2, 0x0, r1}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000400)={0x62, 0xa, &(0x7f0000000000)="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"}) 12:59:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) 12:59:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96808000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000005140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000006140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000007140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000009140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000a140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000b140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000c140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xa62, 0x6810b365, 0x5, 0x2, 0x81, "b9c1a47ba12d75d15fbb19c58b0b787e73a1ab", 0xe6, 0x3}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = socket(0x6, 0x80000, 0x800) getsockname$ax25(r1, &(0x7f00000000c0)={{0x3, @bcast}, [@remote, @default, @rose, @default, @null, @remote, @default, @default]}, &(0x7f0000000140)=0x48) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'ip_vti0\x00', @ifru_settings={0x9, 0x0, @sync=&(0x7f0000000180)={0x3, 0x2, 0x70ca}}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x204000, 0x0) 12:59:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000d140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:22 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)="4ab7956e30164b00fef550826e9c32884f1bbe59c69a1fcd87ddadad91ffc3b879c826d3f0d89d1d5aba52044b0e4e04e47cb2691d9fd2bac1b8c9c339a0a7f245a8fed309285bb9298be51419563d14943f553387b3b666a226efe0beb306381db74d41f33bfbee168ac8dd8ca51e73e43bd674f646d4703db13ad9c6b9bf923041c07a03a8e148013a1a92b19d389a0dac743e3b9be8363382d5a09bd5bfa93bbe969321bd158bd92400000000000000f9b0d6651eccab1c2534") 12:59:22 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa}) sendfile(r0, r1, &(0x7f00000000c0)=0xf0d, 0x10001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r4, 0x4b6b, &(0x7f0000000080)="6986ef3a44be3641e785b1ab8c48c82c58d271372dfffcf51426dc5fcabeecea4a95b10a000a50bd153485ba29053d417f31a9a509ee") 12:59:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D', @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf250600000014000600fe80000000000000000000000000001f34beda0000000000000000000100"/62], 0x44}}, 0x24048005) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf250735de69070000009e940006000b000200000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x91) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000e140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000140)=@fragment={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x67}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) 12:59:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) read$fb(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000f140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000011140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000012140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000025140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000032e140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000032140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000003f140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000040140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x4, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x100, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x1) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x101, 0xf, &(0x7f0000000040)=0x8}) ioctl$VT_DISALLOCATE(r1, 0x5608) 12:59:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000008847140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000040)={{0x2, 0x100, 0xba, 0x62, 0x0, 0x3}, 0x217, [0x8001, 0x4, 0xffff, 0x0, 0x3, 0x5, 0x4, 0x9, 0x7, 0x9, 0x200, 0x8, 0x18cc, 0x6d44, 0x1, 0xec6a, 0x9, 0xfffffc00, 0x9, 0x400, 0x8, 0xb21, 0x7f, 0x9a, 0x3183, 0x8, 0x8, 0x20, 0x3, 0xffff47e5, 0x81, 0x4, 0x2, 0x1, 0x5, 0x1, 0x8001, 0x100, 0xffff8001, 0x7, 0x0, 0xfffffffb, 0x5, 0x1, 0x5, 0x8, 0xfffffffc, 0x0, 0x3ff, 0xffffffff, 0x7fffffff, 0x6, 0x7f, 0x7, 0xf6, 0x3, 0x8d, 0x0, 0x6, 0x7, 0x2, 0x81, 0x40, 0x1000, 0x7f, 0x80000000, 0x1ff, 0xfffffc00, 0x2, 0x8, 0x8, 0x7, 0x80, 0x400, 0x4, 0x7fffffff, 0x18, 0xd30, 0x4, 0x6, 0x3, 0x2, 0x1, 0x6, 0xffff, 0xc, 0x914, 0x1, 0x2, 0xffff7fff, 0x80000001, 0x800, 0x2, 0x11, 0x1f, 0x3f, 0x9, 0x7fffffff, 0xfffffff9, 0x76122739, 0x6, 0x7, 0x81, 0x400, 0xe6, 0x5, 0x2, 0x3f, 0xff, 0xf8, 0x9, 0x9, 0x8, 0x2, 0x3f, 0x400, 0x2, 0xfffff000, 0x8, 0x7fffffff, 0x4, 0x4, 0x9, 0x9, 0x401, 0x1, 0x1, 0x40, 0x4, 0x0, 0xfffffe00, 0xdd9b, 0x200, 0x268, 0xfff, 0x3, 0x20, 0x8000, 0x2, 0x2, 0x80, 0x0, 0xa53, 0xe1c4, 0x3, 0x0, 0x8, 0x2, 0x8, 0x2dc0, 0x2, 0x2, 0x5, 0x5, 0x5, 0x659, 0x4, 0x10000, 0x6841, 0xfffffff8, 0x7fffffff, 0x8, 0x1, 0x40, 0x100, 0x9c, 0x8, 0x6, 0x5, 0x10000, 0xfffffff7, 0x0, 0x5, 0x80, 0xff, 0x9, 0x0, 0x0, 0x6, 0x8, 0x5, 0x3, 0x35, 0x55, 0xe548, 0x4, 0x725, 0x9, 0x180000, 0x1, 0xb93d, 0x9, 0xfffffff7, 0x6, 0x0, 0x3, 0x7ff, 0x3, 0x7, 0x6, 0x52, 0x9, 0x8001, 0xffffffff, 0x6, 0x400, 0x4, 0x9, 0x5, 0x3, 0x8, 0x7, 0x400, 0x1, 0x8, 0x7, 0x3, 0xc7dc, 0x1, 0x4b8, 0x6, 0x5, 0x8001, 0x2, 0xd5, 0x0, 0x4b, 0x4, 0x100, 0x6, 0x8, 0x1, 0x0, 0x0, 0x1, 0x3, 0x6, 0x5, 0x40, 0x80, 0x80000001, 0x2, 0x1, 0x37, 0xb0000000, 0x66a, 0x0, 0x8000, 0x101, 0x40000, 0xa9, 0x80000000, 0x1ff, 0xc34, 0xffffffff, 0x7f, 0x7, 0x4, 0x736d, 0x9, 0xb25, 0x80000001, 0xfffffffa, 0x1f, 0x0, 0x8, 0x6, 0x1000, 0x5569, 0x6, 0x8001, 0xffff, 0x2289, 0x3, 0x45, 0xffffffff, 0x5, 0xffffffe0, 0xffff8000, 0x7a7, 0x1, 0x1, 0x3, 0xbd1, 0x1f, 0x4, 0x2, 0x441, 0xffffffff, 0x2, 0x2000000, 0x101, 0x7, 0x38000, 0x3, 0x2, 0x6, 0x3, 0x1, 0x7, 0x20, 0xc0, 0xa7, 0xa250, 0x8, 0x6, 0x8, 0x80, 0x7, 0x8, 0x354, 0x4, 0x5, 0x5, 0x4, 0x7, 0x1, 0x8001, 0x5, 0xffffffc0, 0x0, 0x5f, 0x7f, 0x400, 0x6, 0x1000, 0x7, 0x8, 0xffff, 0x27, 0x4, 0xfffffc01, 0x2, 0x80000000, 0xf657, 0x101, 0x1, 0x101, 0x4, 0x3, 0x48, 0x2, 0x6, 0x8, 0x3, 0x9, 0x1ca, 0x4, 0x0, 0xc0000000, 0x3, 0x8000, 0x6d, 0x8, 0xe950, 0xfffffff7, 0x7ff, 0x9, 0x0, 0x380c631a, 0x1ff, 0x1000, 0x8001, 0x6, 0xfff, 0xec32, 0x5e, 0x8, 0x8, 0x1f, 0x1, 0x1f, 0x81, 0x4, 0x1, 0x7984ddaf, 0x800, 0x5, 0x2, 0xfffff5fe, 0x3, 0x0, 0x7, 0xef6, 0x10000, 0xdf, 0x4, 0x6, 0x1, 0x6, 0xca, 0x0, 0xf6, 0x6, 0x1, 0xdf29, 0x5, 0x9, 0xfffffff9, 0x2, 0x0, 0x6, 0x1, 0xd94, 0x6, 0x5, 0xfff, 0x80000001, 0x1, 0x100, 0x7, 0x8000, 0x1, 0x944, 0x9, 0x1, 0x40, 0x3, 0x800, 0xffffffc0, 0x5, 0x8, 0xf9e, 0x6, 0x5, 0x3, 0xfffffff9, 0x7fff, 0x800, 0x5a, 0x50, 0x7, 0x2, 0x4, 0xd70, 0x5, 0x9, 0xe57, 0x5, 0x2, 0x0, 0x800, 0xa3d, 0x7, 0x1ff, 0xa6d8, 0x3, 0x0, 0x8000, 0x80000000, 0x6, 0x7fffffff, 0xc4, 0x6, 0x1, 0x101, 0x8d4, 0x0, 0x7, 0x4, 0x401, 0x9, 0x80, 0xab66, 0x2, 0x0, 0x3, 0x9b, 0xfffffffb, 0x7f, 0x67, 0x8, 0xf0f, 0x6, 0x10000, 0x5, 0x200, 0x2, 0x724, 0x1abb, 0x84, 0x1000, 0x3ff, 0x8001, 0x30c1f02b, 0x2, 0x1, 0x81, 0x1, 0x2, 0x3, 0xfff, 0x2e340bfd, 0x7, 0x5, 0x81, 0x2, 0x9, 0x0, 0x2, 0x3, 0x7, 0x7, 0x100, 0x7ff, 0x3772f242, 0x8, 0x20acb482, 0xffffff81, 0x0, 0x200, 0x7, 0x1, 0x4, 0xffffffe0, 0xffff8000, 0x80, 0x80000001, 0x9, 0x6, 0x4, 0x7, 0x8001, 0x5, 0x8, 0x8, 0x637, 0x4, 0x9, 0x6, 0x5546b03d, 0xff, 0x8, 0x9, 0x0, 0x32, 0x6, 0x4, 0x7, 0x8, 0x60, 0x9, 0x5, 0x1, 0x0, 0xae7, 0x3ff, 0x34, 0x3, 0x8000, 0x4, 0x1000, 0xffff0001, 0x101, 0x3, 0x1000, 0x3, 0xeb0c, 0x8000, 0x1f, 0x9, 0x8, 0x40, 0x5, 0x8001, 0xf9, 0x9, 0x6, 0x1, 0x2fd, 0x6, 0x2, 0x400, 0x5, 0xea9e, 0xfffff801, 0xc2c1, 0xffff, 0x2, 0x8, 0x4, 0x9, 0x1, 0x8001, 0x8, 0x2, 0x5, 0x1, 0xfffffff7, 0x7, 0x5, 0x1, 0x8, 0x7, 0xfff, 0xffff0001, 0x1, 0x3, 0x7f, 0x10001, 0x80000000, 0xfffffff8, 0x3a1, 0xffffffff, 0x6, 0x9, 0xfffffffc, 0x9, 0xa, 0x4, 0x8, 0xe714, 0x0, 0xfffffffe, 0x3, 0x400, 0x1, 0x7, 0x7, 0x2, 0x7, 0x9, 0x1, 0x7f, 0x2, 0xb02, 0xffffffff, 0x7, 0x3f, 0x4, 0x800, 0xc93, 0x3f, 0xffffffff, 0xffff2f99, 0xd89, 0x5, 0x2, 0x4, 0x1, 0x6, 0x10001, 0x0, 0x6, 0x401, 0x5, 0x1, 0x5609, 0xa435, 0xfffffc01, 0x2, 0x3, 0x3, 0x6, 0x7f, 0x100, 0x3, 0x2, 0x1, 0x8, 0x8, 0x23, 0xbdba, 0x8000, 0x3f, 0x7, 0x9, 0x6, 0x25e8, 0x8, 0x21e000, 0xb65, 0x4, 0x7, 0x244, 0x7fffffff, 0x7fffffff, 0xc04, 0x10000, 0x3, 0x0, 0x3, 0x7ff, 0x7, 0x5, 0x8, 0x4, 0x3, 0x10001, 0x7fffffff, 0x6, 0x8, 0x4, 0x1ff, 0x8, 0x400, 0x2d2, 0xfffffffe, 0x0, 0x2, 0x2, 0x7f, 0x6, 0x4, 0x6, 0x6, 0x5, 0x503, 0x1, 0xb2b, 0x3, 0x0, 0x5, 0x1ff, 0x9, 0x7fffffff, 0x0, 0x1, 0x1, 0x7, 0x9, 0x200, 0xe4e6, 0x401, 0x1000, 0x33859383, 0x200, 0x4, 0x101, 0x40, 0x7fffffff, 0x7, 0x5, 0x4, 0x314d, 0x6b, 0x5, 0x10000, 0x10000, 0x4, 0x8, 0x0, 0x8, 0x81, 0x5, 0x5, 0x4, 0x0, 0x8d, 0x9, 0x8, 0x96df, 0x8, 0x8000, 0x1, 0x101, 0xfffffffc, 0x3, 0x4, 0x2, 0x6, 0x3f3, 0x20, 0x2, 0x0, 0x5a8, 0x2, 0x9, 0x0, 0x0, 0x8, 0x254d, 0x9, 0x0, 0x4, 0x9, 0x40, 0x5, 0x0, 0xfffffeff, 0x3ff, 0x4, 0x80000001, 0x9, 0xfffffff8, 0x3, 0x7a3, 0x3, 0x9, 0x7fffffff, 0x2, 0xff, 0x401, 0x7, 0x9, 0x3, 0xdf95, 0x9, 0x8, 0x5, 0x2, 0x3f, 0x7fffffff, 0x8, 0x8, 0x1000, 0xf7, 0x80, 0x1, 0x5, 0x5, 0x7, 0x100, 0x1, 0x2ec, 0x1, 0x5, 0xffffffff, 0x400, 0xfffff2cc, 0x1, 0x8, 0x8, 0x0, 0x3, 0x2ec8, 0x7, 0x0, 0x1f, 0x0, 0x28d, 0x400, 0x1, 0x1, 0x4, 0x7, 0x40, 0xdf4c, 0x800, 0x3, 0x243, 0x3, 0x40, 0x8, 0x0, 0x7, 0xf5, 0x3f, 0x81, 0x1, 0x550, 0x1, 0x4, 0x2, 0x2, 0x7fff, 0x81, 0x7, 0x7, 0x5a, 0xffffffff, 0x0, 0x1, 0x40, 0x7f, 0x756, 0xffffffff, 0x9, 0x91, 0xfffff800, 0x8, 0x0, 0x1, 0x3, 0xb2b6, 0x0, 0x9, 0x5, 0xa7, 0xc57, 0x7f, 0x27, 0x34b6, 0x0, 0x8000, 0x2, 0x9, 0x9, 0x4, 0x200, 0x9, 0x2, 0x1f, 0x7f, 0x0, 0x3, 0x8, 0x4, 0x10001, 0x7, 0x3, 0x401, 0x81, 0x1f, 0x20, 0x2, 0x20, 0x5, 0x2, 0x80, 0x3ff, 0x1000, 0x9, 0x9, 0x1, 0x4, 0x171, 0x6, 0x2, 0x3, 0x1, 0x6, 0x2, 0x5, 0xc0e, 0x3, 0x9, 0x5418, 0x0, 0xa6, 0xffff, 0x1, 0x7, 0xffff, 0x8, 0x9, 0x2, 0x1, 0x2, 0x8, 0x81, 0x1064, 0x1, 0x7, 0x9, 0x7, 0xe1c, 0x7, 0x1, 0x7, 0x552, 0x9, 0x4, 0x9, 0x8000, 0x3, 0x3dc1b860, 0x3, 0xb9, 0xa003, 0x6, 0x3, 0x1, 0x5670, 0x5e06, 0x401, 0x400, 0x7f, 0x8, 0x8000, 0xcc4, 0x6, 0x95c1, 0x101, 0x7fff, 0x6, 0x3ff, 0x7fffffff, 0x9, 0x5, 0x3f8, 0x3, 0xc3a, 0x2, 0xffff, 0xffff, 0x1, 0x9, 0x20, 0x6, 0x3, 0x5, 0x7, 0x3, 0x2, 0x10001, 0xfffff844, 0xfffffff9, 0x400, 0x9, 0x4, 0x6, 0x841, 0x6, 0x400, 0x401, 0x10001, 0x8, 0x6, 0x3c7, 0x9d3, 0x6, 0x0, 0x0, 0x9, 0x3, 0x800, 0x3ff, 0x6, 0x4, 0x6, 0x9, 0x7ff, 0x5]}) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) 12:59:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x4d, 0x3647ff7}) 12:59:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000008848140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000006558140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x1, 0x1, 0x65b}) 12:59:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000060140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x9, 0x8000, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b60, 0x0) 12:59:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x4, 0x80000, 0xffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000040)=0x8) r5 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000240)=0x80, 0x80400) sendmsg$key(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x5, 0x81, 0x0, 0xc, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d5, 0x4, 0x3, 0x72, 0x3, 0x80000000}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@loopback, 0x3, 0x24, 0x14}, @sadb_address={0x3, 0x5, 0xc3, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x60}}, 0x4008010) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}, 0x2}], 0x3fffffffffffd64, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x1000, 0x1}) 12:59:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x8, 0x6, 0x22c, 0x4, 0x3ff, 0x180}) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000361140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000005865140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000081140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000004788140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000004888140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000d1140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000fffe140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:28 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x410000) ioctl$PIO_FONT(r2, 0x4b60, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 12:59:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000000)) 12:59:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e22, @private=0xa010102}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000025c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "d484dc436afcbb7da68c6d67177eadf07b2370ac338b9170311eb52b58b49a2bd15378cc"}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8dc2, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:28 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB='\x00'/16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000c0004800500030005000000080002000200000008000200010000000800020003000000080001000100000003c8b1c65424304b59b09e14301bafd0eea8be93013f1b650bcb34b2d46ba16a388e22535030b5aede0ba458b83b5daa16e7"], 0x50}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3801000070944b40700733c0b711a6ee9ff828447b7e5470855450e49fad225c96281ce37132cb35b0075ebf9bce767fed06263fa55dbb1f0cb1cc86de567da95318bef6", @ANYRES16=r3, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="840d0000314b81ed096cb0b17b84a2deb2fef0113be1756646fbcc4d888d5fd6e9be1964f135b60a6694f83cbe2c", @ANYRES16=r3, @ANYBLOB="02002cbd7000fddbdf2504000000540004800500030002000000050003000700000005000300060000000500030002000000050003000700000005000300020000000500030007000000050003000600000005000300077f000000000300060000001c000480050003000700000005000300070000000500030006000000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf250400000008000200030000002c000480050003000700000005000300070000000500030007000000050003000600000005000300000000008fe9ef429b9096c67d55faab3c550786344ff25d637e7438a0631b0c"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r3, @ANYBLOB="000226bd7000fcdbdf25030000000800020001000000d40008800c00078008000600f90000004c000780080006007100000008000500d5d02f5308000600de00000008000500d99bdb55080005005bc21d58080006000b00000008000600ab000000080005007f7fda260800e8644c000780080006006700000008000600b4000000080006001d00000008000500cb3519530800060063000000080006003c00000008000500e7424e0c08000600dc000100000000000000770b2c000780080005006d199e4e08000600c300000008000600db00000008000500e72b3c450800050068d6423224000480050003000600000005000100000000000500030000000000050003000200000034000480050003000700000005000300300000000500030007000000050003000600000005000300050000000500030001000000b4000c801c000b8008000a00a8ee000008000900b49fae5608000a00c26100002c000b8008000a006a06000008000a00ef0b000008000900aeac767e08000a00da8b000008000a00fdf600003c000b8008000a00055f000003000a00db3f000008000900a726c84308000a0086ad000008000a00d254000008000a004570000008000a00001e00002c000b8008000a001dde000008000a004f08000008000900d4ecc56508000900be9c871108000900a35b843fdc0008803c00078008000600ca00000008000500d2205f1b0800050058ff546a08000600d3000000080005006b67816308000600aa0000000800050022dd376a0c000780080005009a9cb31634000780080006000c00000008000500a0f4b122080005005611c27d0800050097cad000080006008b000000080005003b5ba4311400078008000500fdccdc0d08000600be0000000c00078008000500c974e8510c00078008000600a80000000c00078008000600fb0000002400078008000600fd0000000800060030000000080005005f21de310800050097a18e090800020001000000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40000}, 0x4050) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000e40)=ANY=[@ANYBLOB="0aa9b814a05f22e24475397ef0e26b2435599f57b4ae8346bedec4bbdd3b2eae64131ece546a190fb54f1b945628f799dcfe54f4bfbc6e396d75c0d637394370c5f4149ea1593a53dcb599c8e235c0c3332a8b9e7e78da8e6e1d5bad27448aa1e7339834844f1c70be22ffb1057d2cf16d3a49f58f064248c22738669f35b0679fb668e725a3ec", @ANYRES16=r3, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000002) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000002}, 0x4004) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b40)={0x130, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6050f9c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcc550d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x435dc032}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d67f948}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bf6369c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23364331}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c011}, 0x20004040) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x709840ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc2d9b07}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5804216e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46acea65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56438592}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60ec02f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2078d9eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a85671f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abec108}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x328c1da0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x283d3536}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44801}, 0x90) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000000)) 12:59:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000fff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000feff140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000002140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000003140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000380)="0c238584973e504741e0de2adcc2e30bf3f86137c69012dad14bf960f916d66faac72b04daeb08cb494a73fa670b241918edb35b1b1d04c45a0e98118eef52e276f7546245e1b6e8819d") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x1, 0x80800) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@private2={0xfc, 0x2, [], 0x1}, @loopback, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0x7, 0x9, 0x200, 0x3ff, 0x90008, r6}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000200)={0xee, 0x8, 0x200, 0x401}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0xa, 0x6, 0x1f8, 0x0, 'syz1\x00', 0x400}, 0x0, 0x20000000, 0x1, r3, 0x0, 0x7fffffff, 'syz1\x00', &(0x7f0000000200), 0x0, [], [0x1, 0x3f, 0xffff, 0x8]}) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5e0000081a6a72fe34d6eb50eaeb8e5b27b035602586cb5d4d814d65fa780b8c44b9dc2d08129811928e2ac958f2e01e96c5480c0000eeacfaa79ab58397a407ce94a305fbb62aa8a0c7ff1202f8d1ba5e6ae11760a0b843e332afa459362464a934a757674fce8772f807c6a3892d6d621781cbb990190ebf31ddcd5fd8ebe3d8f625748e2f116eba39c29fd9a7abb1acca5200"/163, @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf251f00000007002100616100000400cc0006002100620000000400228008009a00030000000700210061610000"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20000015) 12:59:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000004140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9680d000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000005140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b40, &(0x7f0000000100)="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"/309) 12:59:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x1, 0x7, 0x8, 0x7, 0x6}) 12:59:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0xde, 0x3f, 0x7, 0x313, 0xfd0e}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x2, 0x12) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'veth1_vlan\x00'}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x339, 0xffffffff00000000, &(0x7f0000000040)=0x6}) 12:59:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FIONCLEX(r0, 0x5450) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc7, 0x200, "c8963f60192358d3dee75ce31bf86d072955a4e1e8465f4349a33b3d54bfce10823d12729af6ffb9bcabe0c290d5e14e187e8ba513e65508163f38fdd97bde343f88f8f1e92d566d2579cb7d14378ea01d53fb009c20d081d60ff32389a82718f5a68ba8e674acc805e3ba080ecb9561a5bedf70a2452a2a36e3d01a52850ff3581c2effab31c8edb1645eb2b8778be9898c80cd638a6b035683ae6a3a9d31b55de5e66fcfe2c7ed22f24f07bbf0b282e35a2b8c660b65171170959b594367"}, &(0x7f0000000180), 0x400) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0xa102, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r2, 0x4b6b, &(0x7f0000000340)="9b3014943b5974cdf047cb417336bddb5c3f53214ffdd548ba74d9f8d338bc30c96263d83b3fc446e17b8a6e8ffb8f13a25a21e01e51281640f710dde17a16802eed1ba9ca51afb5f73aab123b7be1ee75a68a187b2b4160719d1677ac4fc706f4969511d928f13cf6fdec98d6ff81aa0a66852a7fade09822e417cd86a065f1502fe07763d6b97dda144f7039326e800ecf68127beb363a5e8d2badfad98969785b84f7d7c2e5c6c551d190db7ea8ed047d9dcd1f9ce0bfe181990b5fa77a1fb8bab7fc32f95a8ad09e0d5deb9a5907b44683682742a280eeae49961120") 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000006140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000007140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000008140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000009140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000a140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000b140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9680e000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000c140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000000)={0x3ff, 0x8, [0x4, 0x8, 0x3, 0x9, 0x1c4], 0x3d5d}) ioctl$KDMKTONE(r0, 0x4b30, 0x3) 12:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "bddb00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 12:59:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000d140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1187.149712][T14929] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:59:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @random}}) 12:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000e140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005060700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000840), 0x0, 0x0) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32=r4, @ANYBLOB="080002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 12:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000f140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000010140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1187.426928][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1187.454864][T14943] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 12:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000011140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1187.535157][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:34 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e2) 12:59:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000012140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)="55c378c80ca2628d4c0d18bcdefe82c4003234c05254e55bf6de83a4e63f617760c0ade11e591859eccb6ff478a4cd977a66da001d64533d270fd6236b566f16585db3d620c90f111767f0c6a9104782c3fca037a5c64e15337d543efb39451a78ace9d895ab7289de2d0f5eec6537e654eafd831359ae7c34013f932ca550f83b0e7f746213311156e3313165a0494b03e7e583b94820b42f876bd641170fce49c8a87385096ff3ebcd25e29f") 12:59:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0xd, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) dup3(r1, r2, 0x80000) 12:59:34 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x6e800500) socket$phonet_pipe(0x23, 0x5, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)='0', 0x1}], 0x1, 0x0) 12:59:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000025140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000032140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000080)={0xffffffffffffff81, 0xffffffffffffffbb, 0x6, 0x81}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000300)={0x7a4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfa}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xf1f0}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x83d3, 0x4, 0x0, 0x8}, {0x4, 0x5, 0x6}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}]}, 0x7a4}}, 0x40001) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 12:59:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000000)="de2d7479b68961d678cc7e19e4d9c07ae88d617a4ef900000000daa772d6e66445b843aa31680ab30c5a7f4db5e078f5a1f915dbee733d986cbd00000000046744e452a3a417c0141455b476733b7defa7f3f86aadabda595ac6ebac0505d04e42701a82dc825067b291b838689ef26500fbd75dd1") getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12:59:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005060700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1189.634687][T14983] device vxlan0 entered promiscuous mode 12:59:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000060140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1189.799015][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1189.877700][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000d1140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:36 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000040)=0x1a, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) signalfd(r1, &(0x7f0000000000)={[0x9]}, 0x8) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000340)="4a00000100ee9d87b95dc294e06903e4492e3a98d4ec5e827d17e4ca9468a45459efd9c18a8d7c9ff2e60e6ad9c457fe2e8c47f043bbadebf356a630986e31a701c9cba163150400eac469f89416cba0b76c44508dcdc9bd751f16cce28ddb1ce1a3675129e13fa4efe90c93cf49a0765ae3b81bf235455571c88d1ea96792834d548fa1276058d42c9fc53f1ce2d75893eba880f0b91235d40a7293077cbf635774986e7c4a74f2fc9a5baf208edd119be48da3ee409f40a5d6aa7051140f0a5cc1a52149bb770179151f687ccdbcb97c43ca1e447cb14755ad3dd268776ac22e588dd8d0cab2057012b0724d810009000000000000000a17afe7a9d7d89bffd17e80d892b825fa493c9dfd8891e0b4b66b0d4f523cc9fd43f8a4597faee17f1e79daa49fad2577a45cbb0deaf45fffbe359d5c71ae03b925181f71e17cd034d8754e0edaf1ed06df0f20c3573e01dc608af1569d0bfd20aa8b8b61a01146d5747e775f05afd08ecf8b165284fbab8bb34b3135922c20bf7b700010ff95bcb7020996313dccbee9a968a0e43f97f325c5f46c0467c829bedad92d3665e87b255853d76a9f9612880814700ba1720c53249f32a622e6ea980bcda8d7b6bdb3bbef4bdac682685b7a97458338dacc9b484883b35743385d9789c5c16b0f51f0ae10db96ff977754a14d69d4b494ac18be042ea601a0154d269b69f56b2fdfaba9cf5c946dd34fb24f9fb9918f61f56e0c010466b9b800000000000000") 12:59:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/55, 0x37) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x6]}, 0x8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "11e1f0"}, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000000c0)=@netrom={'nr', 0x0}, 0x10) 12:59:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000040012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1191.336199][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.403691][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.510383][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140212800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1191.631440][T15056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1191.733580][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1191.754699][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9681a000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140312800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:39 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x100, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b60, 0x0) 12:59:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0xc029, 0x2}) [ 1193.895505][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140412800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140512800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1193.954714][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1194.062128][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1194.103643][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140612800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1194.162022][T15096] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140712800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1194.256487][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1194.296639][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1194.388306][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1194.425048][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140812800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0xb4a, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x7fff, @mcast1}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'bond_slave_0\x00', {0x401}, 0xfff9}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b60, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000280)) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}}, 0x8800) 12:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x64, 0x2, 0xe9, 0x0, 0x2, "234da1f8b269961a90a19cf7db54333102635b"}) 12:59:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1, 0xffff6b7e}}}, &(0x7f0000000240)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x8}}, 0x0, 0x3f}, &(0x7f00000014c0)=0x90) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001100)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001140)="0c27c1b745a2a64f8cf2ff6e33dc4145c0f330d9dd498b141ec180e80e6482ee152a35f5e3b1a782f5c52cc7dcac89c4f426c6f6f0b5b8036076fa160ab27c", 0x3f}, {&(0x7f0000001180)="a5f0841b87c5f3dbc92f68af3708eb232e0d1ae362f0d5b45127ee56d6293e292d0cc92baf428948fb49515272204a6032099eacf3894d74d69bfa150160ca16b42bf6f7885d342942792a952d77ac5d7ef1f5547a51d66ddb82a852d776778663754e7c9e855955c32341ee42e17ae6d8c4cac61ad06771ac51da784c833b1ef1785a003bc63f4e17db43db2164081d2c9b3cdac98cbecc151d6291ba8365b8fe21cc2c9f2c69a3971295465c925962c0877d372a04661e", 0xfffffca4}, {&(0x7f0000001240)="fb22c2cdb93a77ebd125e427c127f93e95eba998206fdc2b4eafc06eb52ec05ad613ac01af33c33eb4ec98936e5cbaa5186587adf757c837fab81f2e2e15cc299b5e4d260158dc7e4be271fec06798ea8b385f3b59b9c4073c5a5bb3a84bdad0609b4a79ef808e184a25101b70542b488e82a42cc64bb1587ae752198fd5f0f92989b8f4ad9e9dd77fdc18c6d345cd66ad21633255c93f2b27a3474684c58869", 0xa0}, {&(0x7f0000001300)="5b5900f5af79040e959d1562289b69378425d091682a3536e75959265a1af5109c0bd0046576bc05cb95811995b163022cc9c8f8b06d73fac9aa853686a569b46da35bf14c5157b34c9989b2b5ca2aa85756342ae98f98d079256ec4b83804e4b5871d9834c4e69387aa9439ba41175e553a5865aeb027cff9f577405e304bdf786995bd73c17dc8c0990b30220d0f955fadf4536dede18c536788ecb17f27a5c0b023a2f99d85900f1660e7eb2b855e4e07e155ade619", 0xb7}], 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="300000000000000084000000010000000180b13408800000e0ffffff02000000ffffffff0800000000e01f00", @ANYRES32=r3, @ANYBLOB="1800000000004e844a6b4c56edab00000080044000040000008400000005000000200000001f00662c46c571d5c70200008400000001000000051607000200000008e3ad0008000001000080", @ANYRES32=r5, @ANYBLOB="18000000000000008400000007000000ac1e0101000000001800000000000000840000000500000030000000ffffffff2000000000000000840000000800000000000000000000000000ffff00000000180000000000000084000000060000000400000000000000"], 0xf8, 0x4000010}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000010c0)={'syz_tun\x00', 0x5}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000001640)=ANY=[], 0xfffffd88) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000001080)={&(0x7f0000000000)="4440c3ae22bc78f39907c8c30891102affbfce9eb301e09b956e631f6fb6735610716e238f18ceb85e7c2ea79bf27e3ab2b9be5bb282cfde08b87f9489cd610c", 0x40, r8}) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140912800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1196.304733][T15125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140a12800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140b12800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96894000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140c12800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 12:59:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e22, 0x40, @remote, 0x8}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x5f9, [0x1f, 0x7fffffff, 0x80000000, 0x81, 0x1ff, 0x1, 0x8, 0xfffffffe]}, 0x5c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) 12:59:43 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b60, 0x0) 12:59:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140d12800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140e12800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xf3, 0x1, 0x2, 0x80000001, 0x2, 0x3e, 0x1, 0x2a1, 0x40, 0x1b, 0x7, 0xc9, 0x38, 0x1, 0x8001, 0xfffc, 0x1000}, [{0x70000000, 0x7, 0x8, 0x2, 0xffffffffffffffff, 0x92, 0x1, 0x4}], "a66b8d8897a65c8bfb1f8bd1c64349e75337b3107ca5bfdf706bcfa447df8ee1b215f500d7a83b3151f8c51fb941efef21080c60d91264bbfd5850ecf7cf532272cfada22bbbc6ab03a06df741be4031776efba47826df7590e4b3d8c51cc84a8fe6c26170291e6abec050aaae5d18064b9eb1733f38e7bc8699e6701f7496788e7d030dec0779376d22a15d3d779faaaff08ea337f3b82df84b2f50a0301214a9d9b6488a0453b885f1843e5ee4e7aecb9594069e70dfcbae99b941616bf2b595255fa4f55d9d7628375f15c838a1004a1da96d9c6a2477fd00eade86e702bd", [[], [], [], [], [], [], [], [], [], []]}, 0xb58) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140f12800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d968d8000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000141012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x300) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 12:59:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x41, 0x1f, 0x3, 0x0, 0x0, [{{r1}, 0x6}, {{r0}, 0x93}, {{r2}, 0x400}]}) 12:59:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000141112800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1199.579562][T15203] __nla_validate_parse: 11 callbacks suppressed [ 1199.579572][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1199.602830][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000141212800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000142512800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1199.671728][T15218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1199.730189][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000143212800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1199.778339][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1199.810078][T15228] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1199.876376][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1199.906161][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d968f0000000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000146012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@fixed={[], 0x12}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000014c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x4, &(0x7f0000001280)=[{&(0x7f0000000100)="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", 0x1000, 0xffff}, {&(0x7f0000001100)="f2382e19ff75e7d0f87be16edb5ae7c8ce3b1128c870c5e58c882b2441874a9914090104c18470d0c6abe6de50bb0106f35d9ac95a06e3d3d034fb3b6edd173fdba5abf8c8078cfff51c21f1d6b1de2b2827f0d732ee5bd73962322cabaa90ce0bb36f32f25dbfd06fcf2437582b6cbe82c6b45789", 0x75, 0x7}, {&(0x7f0000001180)="7ad93569b9a4d5aa0a03928417402e095b703d45596c5948d2fcd696565f4554727bb034a5eb4dd509ca8e5b262bdce4e5bd06fdab0572839006d76e8b38165523f6a4343db429e97b8e4bd3e49f1eabbb48de366440181d1403be", 0x5b, 0x2}, {&(0x7f0000001200)="fbf125ecca6493de3aafe1d46e74495290109e89a2e975a62397df47ef811149c2dd1677c4fa018ff1bf3738cf7208a7d3eadd88d17c76d99ab0424bb6f67bed6750ec29593ad7f6fb5b28f8a81cb2b635ff4e1b62cdf5ac7e6f2718", 0x5c, 0x7}], 0x1000, &(0x7f0000001500)={[{@quota='quota'}], [{@smackfsroot={'smackfsroot', 0x3d, 'subj_user'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x33, 0x34, 0x65, 0x64, 0x33, 0x66, 0x33], 0x2d, [0x35, 0x38, 0x32, 0x52], 0x2d, [0x38, 0x61, 0x37, 0x63], 0x2d, [0x31, 0x30, 0x36, 0x37], 0x2d, [0x35, 0x32, 0x2, 0x0, 0x35, 0x65, 0x39, 0x36]}}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@obj_role={'obj_role', 0x3d, '{'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, r8}}, {@subj_user={'subj_user', 0x3d, '\\@\'!#\\\xee[\xf6.#\xeb*^.'}}, {@smackfsfloor={'smackfsfloor'}}, {@euid_gt={'euid>', r9}}]}) 12:59:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000240)) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000700000008000079b45affdf7b4cd13542080000000001000000000000000300000000000000000500000000b51acf8c0b28ca4e0546ddc7281e1000000000008000"]) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl(r4, 0xffffffff, &(0x7f00000000c0)="6497e9d5c4d0b32dc705c66a883199e9fc45031458fff764ddc711261372eb6b44cd0141104c02764e120cd27c09ac1020352c421182a0023f3afe4c03dc243f0aaf650507591a098e7e591128e8e70cd72f00b65f3d60451d42228cf8ee814caf3808d239fe979f85387b24ac62a100e77facc346469a06e822b82afb91dcc95f07dec3c6a86c42317e22992506e13998cd18f70e8488ddb15ef231baffac8402a78fa92c667ce6106a490209497e3e33412c9d6200b40ea43f5a95b20009b5ca69ecb7d0b1db02a3230e937cbd1d52df2fbf70b0660745d64569376a18db6a9b0aac55a774a67644caf1") finit_module(r3, &(0x7f0000000000)='%v:\x00', 0x0) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:46 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) setpriority(0x0, r0, 0xa5) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xac000000}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x66, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, &(0x7f0000000140)=0x4) ioctl$PIO_FONT(r1, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) recvfrom$llc(r6, &(0x7f0000000000)=""/161, 0xa1, 0x40, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x10900, 0x0) 12:59:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000014d112800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1201.179899][T15248] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1201.227940][T15251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140036800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140036800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000014001280020001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96880010000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000014001280040001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0xd7d2f5f8b17e50f7}, "c5047b72e5f20194", "e93881f5ad4b76017903e7ce9f8717e7", "9c208925", "2e2de42c51e5b2b7"}, 0x28) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x400, 0x7, {r2, r3/1000+60000}, {0x4, 0x8, 0x9, 0x3, 0x7, 0x7f, "3503dc85"}, 0x3, 0x1, @planes=&(0x7f00000000c0)={0x9, 0x8, @userptr, 0x4}, 0xfff}) syz_open_dev$ptys(0xc, 0x3, 0x1) 12:59:48 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='schedstat\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x9, 0x80000000, [], &(0x7f00000000c0)=0x81}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)) 12:59:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = syz_open_dev$audion(0xffffffffffffffff, 0x2, 0x2) getsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'rose0\x00', 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x364, r4, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x45, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x364}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd8, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x878}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffe1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdeee}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}]}, 0xd8}}, 0x0) 12:59:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000014001280100001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0300006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0400006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b3900006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0201006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:49 executing program 4: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)) 12:59:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf250600000014000600fe80000000000000000000000000001f34beda0000000000000000000100"/62], 0x44}}, 0x24048005) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '^\'%$\xd9&\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '*-\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b6b, &(0x7f0000000000)) 12:59:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x1, 0xfd}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="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", 0xfffffffffffffe6e}, {&(0x7f0000000100)="039d0a54039260be5bac07f76591294cd3218f756efefe1857be40b276f691a7c74f", 0x22}, {&(0x7f0000000200)="a0671abf0b318570bcab91c4164f8f922eed7fb7cb4afa9636b553c9ef1fa1472a47a111f18f728a716231c0dbcde4a332d86157bcfbe8412b6f7e4b6dc3477124ca89a1bd655b0e7a4ce0f8097f18944e32342d05e3b72f7fdf649e3eb53da81f2731846825567ea5148d86fc261413ec01db7fa07116e000000000001eeeac9854b77a7bd8163ed71a27bc340eefaca7e944001fcddc8d03b276dcdc13da1c17a8f7e203f7ff5984567bee6faff1e548df1193a69a4f505832feff429ab6528cf90049d25007fce198b0f9889c737047841a4e00"/236, 0xec}], 0x3) 12:59:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0301006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0401006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0501006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1204.641813][T15339] __nla_validate_parse: 9 callbacks suppressed [ 1204.641824][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1204.642134][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1204.660426][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1204.696312][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1204.743061][T15350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1204.803148][T15351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0601006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:51 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000004c0)={0x141, 0x1c, &(0x7f00000000c0)="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"}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000000)="b942eb92563171e629c788ff0df8ad2437d02d85b2ffb7ec7586a6e11681d111cc04d3b5fcc6982cfd574b42d8810078793789c2fe1a443a2c06000000000000002f13f3effbb396ca03b0fcbed45b1e0932ed817b7b46a0dae6655cfb") ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'veth0_to_bridge\x00', {}, 0x9c}) 12:59:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r4, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7964}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x81}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x40}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x400}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x41810}, 0x8040) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) [ 1206.038498][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0701006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0801006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1206.085381][T15367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.157002][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0901006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) [ 1206.201891][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800060000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0a01006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$peekuser(0x3, r1, 0x400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b6b, &(0x7f0000000100)="f04d86eaa9e36f5c038c450cde0335d8cc26ddd2a8a31502ebf200000000000000050000000000420000") ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000000c0)) 12:59:53 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_ifreq(0xffffffffffffffff, 0x8929, &(0x7f0000000140)={'batadv_slave_1\x00', @ifru_ivalue=0x4}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x4) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:59:53 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000240)={r3, 0x8}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000000)={r3, 0x3}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x5, 0xff, 0x10001, 0x7ff, 0x1f8400, 0x3, 0x101], 0x7, 0x7, 0x4, 0x3f, 0x5, 0x3ff, 0xffffffff, {0x9, 0x3f, 0x6, 0x0, 0x800, 0xcf, 0x8, 0x9, 0x2, 0x6, 0x0, 0x2, 0x1ff, 0x81, "ea4f819ce328a3fe6a363b61fbc6c587780acdd7d5e086c7936ba5ef5814374b"}}) 12:59:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0b01006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0c01006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0d01006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0e01006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:54 executing program 3: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)) 12:59:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCEXCL(r1, 0x540c) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES32=r1, @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRES32], 0xfffffd88) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000000)) 12:59:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000), 0x8) 12:59:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0f01006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b1001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1209.665744][T15471] __nla_validate_parse: 13 callbacks suppressed [ 1209.665753][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b1101006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b1201006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1209.752142][T15478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1209.771613][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1209.816228][T15485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1209.892423][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800090000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 12:59:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b2501006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40c043, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0xfffffffffffffffe, 0x8, 0x3, 0x0, 0x0, [{{r1}, 0x1ff}, {{r2}, 0xce5b}, {{r3}, 0x3}]}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) [ 1211.065319][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @rand_addr=0x64010100}, r4}, 0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r5, 0x4b49, &(0x7f0000000000)) 12:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b3201006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b6001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1211.111527][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1211.221850][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1211.223276][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800bd101006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1211.268637][T15522] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 12:59:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0003006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x3, 0x80000001}) 12:59:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) read$sequencer(r3, &(0x7f0000000240)=""/151, 0x97) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000040)={0x0, 0x1, 0x4, r2, 0x0, &(0x7f0000000000)={0x990afb, 0x8, [], @ptr=0x8000}}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000080)=""/229) 12:59:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x9, 0x1e, 0x135, &(0x7f0000000040)="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"}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ttyS3\x00', 0x400, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x1) 12:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0005006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0009006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b000a006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0110006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 12:59:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0014006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)={0x2, 0xabe1, [{0x7ff, 0x0, 0xfaf}, {0x2, 0x0, 0x8}]}) 12:59:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 12:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0040006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="6c0100000001000101f3ffffffff0300003e9a19b9230000000000000000000000000000000000006d86e2c3efed5b023fb299e6cb26e1963e754fa471551774644be68fcb2d5f1f9aaae6010898fe57e3bb0075c13aa6c392046e724f04113c5d629b440cd0eccf0f0b60299b2964697181fead4a83cc00cd92917f84e36d8a4b394275781c304682652e81cf42e3146e1afac11a6d46b982b060774ff408ef046b5538a78f6251f9032b59a17da7c07998fa00f32455888fa33decbabf92f65a98266271b0186602068ae35c10de2218c3c50065f8"], 0x18) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x7ffe) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) dup(0xffffffffffffffff) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) dup2(r1, r2) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 12:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b025c006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 12:59:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 12:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b048a006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0002006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x66, &(0x7f0000000000)={r6, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r6, 0x20, 0x75, "9ff97a941e17e7ae3e6fcdd94df30610ccb4eaf57560bc2755fba4175d92526c89f164742a14c1bbc58c5a62c4ba493b253b4657b2b99c127872c53f395f25afccaf5ccae034e18d82f3e1deffb82f5df109ec937992d82cdc6b1ebc6d0b9caba0f61b78617dc63efeef47644e9127cedb9d8acb11"}, 0x7d) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x66, &(0x7f0000000000)={r7, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r7, @in={{0x2, 0x4e20, @multicast2}}, 0xb8, 0xffff}, &(0x7f00000000c0)=0x90) 13:00:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCCBRK(r1, 0x5428) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) ioctl$FIOCLEX(r0, 0x5451) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000540)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0400001200edae28bd7000ffdbdf25260904ff4e244e21ff7f0000c600000002000000000000000800000005000000530d00003b000000", @ANYRES32=r5, @ANYBLOB="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"], 0x44c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8090) 13:00:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r2, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/138, 0x8a}, {&(0x7f0000001240)=""/22, 0x16}, {&(0x7f0000001280)=""/99, 0x63}, {&(0x7f0000001300)=""/131, 0x83}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x7, 0x23, 0x3ff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x200200, 0x20) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040)) ioctl$PIO_FONT(r2, 0x4b60, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x1000}, @timestamp], 0x2) [ 1215.601656][T15623] __nla_validate_parse: 11 callbacks suppressed [ 1215.601664][T15623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0003006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0005006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0008006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1215.701440][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1215.791053][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1215.879122][T15664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0009006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e21, 0x83ec, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfff}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000700)="361bf4ce7b9419b31773a3e539c95e84a05a4f9a6b05b1c5fe85745ebe8292d5b0df88641c12c926446a70e5fe1e0852714568c8c52c66447200f9125d8cc3ad06d2560607ce025ee7f7e1ffbf52aeb257a37340e0d1f78555dda56871115b66", 0x60}, {&(0x7f0000000280)="d86fe18053e1eaf98c3d5683c7d570f32faaaee5019479f34565c9c256c83ace03c8a50b8a7a1cb3403ad31b3e7fa36e8b586a01a84602399b2f47a7cb42d19b941a37a977efd6b4b9a408e30fe9930e14fb618b374316a028a2148f09a4bb53de6b18e442352ee157b3c5738f08de1a1fe9cb552a3f3101421c71861bec612857fb7335024ef5d543c55e155be500dd692fadfabd09122c50780200f3b8952c365cc51cf1193a810fd324dfea41b84876bbf053a75941f05c2f6d2451297b8d", 0xc0}, {&(0x7f00000004c0)="24dca798be31cc38bb4766efabd1b15e3ef0af2eb7140597117703d3032a5cb0de6ea2023e5b68a6fcf6bc8c8e1b00000000000000000000c20890cfaef79b969c7909f77b2b81613ba58687c60c61cad4ab57fbe95dbc", 0x57}, {&(0x7f0000000180)="10ff501190fb262cdf0355cb37442b6c469d5c695864d3f9420b504661a80726e4ae6b0170d4644f490e7eac25392665b7", 0x31}, {&(0x7f0000000080)="e9098ae3e7ef8d0a92f689f4f3b79869e735c2b26a772a9ebbea1b268779bea748cf638c03611e48336cedce8c60ea331f9a5a5cc950749d68265865f424d211a7560dc05355aa0e36c101b6d0f138ec744c505f08b5de5dda660b6ab3777ae4d914b1de35076e85825b80774c81e5359c2ef485d64c07e1a0e4904b1b238507d859544880cc314c380e2d86e2b6fcf829ba3981f851eb67125c33e9cfe57df97817341db73a99d944e8634974ab75", 0xaf}, {&(0x7f0000000640)="a65bd6c946a7c82f8c53fcd8f2fe19b3d53191d6022eedc734521d20b9faad9ed3a05050a84f0c0e8b2bca3a9ba186aa2db85c7dae8b7f7c25e2843304cae36b901094befe82b4efa93799d6f80fe0a3f3b24685c95f50aacae5f4703531dd04e216b15f780fe5aec2c4a97e5cc87fda7f26939dfbe6961321312457bc4f0f8a250cb6ae", 0x84}, {&(0x7f0000000340)="9d09245e63351d2a93aa836ac4378cc254cf28790f8a1c56e6e3", 0x1a}, {&(0x7f0000000380)="65cd39299b4d69ebeaa212a3554926844f115cb39e9199dc54f6b4da02111550fc3d011775338fbf25cb6e658c7825309ba24ca6965549a198e3c55beb29f8605496694bd854ca4c27e2f7", 0x4b}, {&(0x7f0000000400)="f33ebab42c3fc3785ccfdf905605dae2248991a0e113ebc1306b8c74200a3358b3793d8687992611a9da7e5a702a0e3caccde6db9dcf4888340819613704229b75c0449e3f4b336877dbcaae29f8a3aa6703244749b1495e9dcb99f476b41dee4e856e2c39c9f5404883f61f4fae596ab51a88f3bb00893987f6ae90998401d8d23dee93876adfd3c3fa8fed", 0x8c}], 0x9, &(0x7f0000000580)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}], 0x18}, 0x4040040) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000001c0)={{0xe9, 0x2}, 'port1\x00', 0x1, 0xc105b, 0xfffffffb, 0xfffffffc, 0x7, 0x32ff, 0xfffffffd, 0x0, 0x5, 0x9}) 13:00:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000000c0)=0x1) getpeername$qrtr(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) fsync(r1) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0xffffffff) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./bus\x00', 0xee01, r5) fchown(r1, r3, r5) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xa, 0x6, 0x16af4aeb55403e71, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44040) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b49, &(0x7f0000000000)) 13:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b000a006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1217.177804][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0010006c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0014006c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1217.309985][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0010016c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1217.453616][T15712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b005c026c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x200]}, 0x8, 0x80000) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000240)={0x2, 0x4, 0xfffffe00, 0x1, 0x19, "d7f1bc70173af6701304ef6a35c24311cdd5d6"}) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x80, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="b55886eeb8144bb545d4923cebc9da8bb424e9ccfa8214d5d65ff224d78d96f84aef30f06fd2ad05a914a6a1b3351090b2a110d82c926dd2bdbda78fd44da85da392f899e13194a43fe41f9401485c1888841b838aa4343331b12b4ec5dc53140beaf67eca7a429491cb44dd02d4185f814d9c24c925191c053cacd7fc1f43cc73e3396930d9d3690b2d6002c9ab1a2fa9d400d897691e00511583f06c931409d573e8feddd6c3b29e86ec3568", 0xad, 0x1}], 0x20400, &(0x7f0000000280)={[{@inline_dentry='inline_dentry'}], [{@subj_user={'subj_user', 0x3d, 'n\':+&-}'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, 'subj_user'}}]}) 13:00:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) 13:00:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/82) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) 13:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0000036c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1218.614346][T15725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b008a046c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0000396c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001026c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001036c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1218.854944][T15749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001046c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000025c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "d484dc436afcbb7da68c6d67177eadf07b2370ac338b9170311eb52b58b49a2bd15378cc"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) 13:00:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f00000001c0)="a87509f4c667536e56c1091c577fe7d9220cc99d595b6dbd7ea12f0de6fb834e2efbef000ab19a8f4e081629d5e23d37ac3dc96ee6158cc6207aac8bfb22c396bbe8fb707eb17adddbc37eebbf104941734eb08b629f7f77cd4708b8057861ac2931834361ef6a96bce7008c3427d273b16e8626b6438e5cd8ebc31e2be49a26caf57c5887fc25c743dc55816a1e2260b68402ff9895600d8e51b444a14075ad858238e0702fc2d452c125643610f57732322e927d59248404a710e3c09b1529f5a656b12a1abb3948d72c78881045bb85d17f39c5c84e8ef23e3dac77be72095235ac2b3b0e82ce2645b099148d55ede670cd002dd8af7ff1806ef15f973da6eece212d027098f6fb") 13:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001056c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1220.069383][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)="67b70111cf79ff569c888fc6f65ad86e1dadbbd47d70d56c4aafe098d4c2c0f589dd45c996cfed3aa0fa406cef2e7e933fd5953c6f04c4a386a74d23a1b118cad2b5da1b6a318f24d3e02fdad109526511d9955c183d92fd19236a3b78f5d9c05a9dd09c0b57b6fc0adf596a06b13e35ec39e4f1b6864d97b52b0168e63900e38653db413fdae5415b054d801bd5bc563f05b47b8c198050d5680e40572b813855a8774d5b35b04e3a3e6ad5", 0xac}, {&(0x7f00000001c0)="a74a6893744e8b5f5d3f2034c80db2257827694cfe6f695822dbeb81a26748527599d802f1c57aa6588711a707a0bfdd5058ed3ff93da0", 0x37}, {&(0x7f0000000200)="324a677fd9b200bd61606bd630ebf00d622d876e5e8ea7f2f0f45111a94fa1055a754c088d25b3373e676fd6b198fa8df7a3967cc4", 0x35}, {&(0x7f0000000280)="971239f0a32685b323d9a87ebccf2c50e937a9bf40bfe8e191eb61820ed5ee050f2d7237c1faa5880b3eb58b442a87c0862aa3e931037aa86a078478112dd0955f8b0a8c115eca98f25f271eba192f26b6b2f43b2b0261841bd0f3d9924721cdde2b377ce32a7449f3639b2969ef635cd1e379a3c4ddd668be3bac45d0fbf1896c903752293a687570ba7539c0acbc76a9a5b8", 0x93}, {&(0x7f0000000340)="695ab598bb7ff3cf64d00c6a506ffcf61c49dcd66665eca5859612fa7d546b0bf76a272979ef1d3d068e0084733443d1b045c251c906f85dd865631075433aa9bd95efed1e449eb8391c8b5a4b17683a1417a58495", 0x55}, {&(0x7f00000003c0)="ff818339cd582547fafe4c8fe22867cf973b00c69662d6f23d24189df573d699fd666733eafb725ce843", 0x2a}, {&(0x7f0000000400)="5f6f3368f688d3de1e58dd3ac0f2a60ab9ab76892e6ce3abbf89efbe5f9ee57cc28ef1923ec197fa1de9889f033830fddf517f4a7e5034087b627da87a798a34e9deb0a20c6b7f49c32966a35bc588bf22572587f7621a9b3b4087b01b9717054d4233c21836ec4daa32e9b0b698990cb697350c", 0x74}, {&(0x7f0000000480)="a875e426538cdfac326b138006594746b11039e95f49b3209e6dbd29bb9db5fe21d7bc93ac474b45bc9f66d02cd87153395839ac66fcb7a8454fab747d0b427b108cb494a7185302a9f48731b381ddb06cabf489e4fb00c5cb547b4602a2af00a9d677c579354b6e9148841a5269ce82a937b04822e680eff72a7add68703ef28c10082e7a4fcc1f3db55126f2eaa660708bfe20911a8d6f034e1270f1ca56f3aa0f0949ea9cee7a14694753697a22bdf4540e2af419d4ebed09e84228d1a5316dabb6e41597a6ceac", 0xc9}], 0x8, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}}, 0x80000001, 0x40, 0x2, 0xc77, 0xb, 0x4, 0x1f}, &(0x7f00000000c0)=0x9c) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) 13:00:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000025c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "d484dc436afcbb7da68c6d67177eadf07b2370ac338b9170311eb52b58b49a2bd15378cc"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004010) 13:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001066c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001076c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0x1b, 0x4}}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x100010, r1, 0xfff000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4e2000, 0x0) r1 = signalfd4(r0, &(0x7f0000000200)={[0x401]}, 0x8, 0x80000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000240)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200001, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/166, 0xa6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f00000001c0)={0x0, {0x6}}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000000c0)={0x200, 0x800}) 13:00:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800180000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) [ 1221.554199][T15811] __nla_validate_parse: 1 callbacks suppressed [ 1221.554208][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001086c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001096c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:07 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FITHAW(r2, 0xc0045878) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000080)="2ae743ac1171a0") 13:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b00010a6c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b00010b6c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b00010c6c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1221.742269][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2e, 0x4, 0x0, {0x6, 0xffff, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) 13:00:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b00010d6c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/144) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRESHEX, @ANYRES16], 0xfffffd88) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) 13:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b00010e6c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10802141}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe523}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x2400c894}, 0x20000000) 13:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b00010f6c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001106c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:08 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x8, 0x6, 0x3738, 0x9, 0x9, 0x1ff, 0x7}) 13:00:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001116c6f7770616e000004000280080005"], 0x3c}}, 0x0) [ 1223.252013][T15879] IPVS: Error joining to the multicast group 13:00:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001126c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$isdn(0x22, 0x3, 0x21) r3 = pidfd_open(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000340)=[r2, r0, r0, r3], 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x6, @local}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r4, 0x4b6b, &(0x7f0000000000)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 13:00:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = msgget$private(0x0, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}) msgctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}, 0x0, 0x0, 0x800, 0x6, 0x0, 0x0, 0x0, 0xfffb}) socket$caif_stream(0x25, 0x1, 0x2) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/103) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e1c, @loopback}}}, 0x88) 13:00:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b60, 0x0) 13:00:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001256c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001326c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001606c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = dup(r0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x12}, 0x7, 0x1}, 0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_FONT(r2, 0x4b60, 0x0) 13:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001d16c6f7770616e000004000280080005"], 0x3c}}, 0x0) 13:00:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0xbb}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0x9d0000, 0x3, 0xffffffff, r2, 0x0, &(0x7f0000000040)={0x9b090b, 0x0, [], @string=&(0x7f0000000000)=0x5}}) openat$cgroup_int(r5, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet6_opts(r2, 0x29, 0xf, &(0x7f0000000340)=""/4096, &(0x7f00000000c0)=0x1000) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e21, @local}}) 13:00:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616eda0000000280080005"], 0x3c}}, 0x0) 13:00:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616ed1e400000280080005"], 0x3c}}, 0x0) [ 1226.173332][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1226.193585][T15949] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1226.262618][T15953] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1226.288179][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1226.302315][T15958] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800400000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x7, 0x9, 0xffff, 0x8c41, 0x8}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x40040, 0x0) 13:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616ed2e400000280080005"], 0x3c}}, 0x0) 13:00:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616ed2e800000280080005"], 0x3c}}, 0x0) 13:00:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e020004000280080005"], 0x3c}}, 0x0) 13:00:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1228.102041][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1228.118416][T15974] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1228.231275][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1228.240188][T15981] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e030004000280080005"], 0x3c}}, 0x0) [ 1228.358860][T15985] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xc82, 0x1000, 0x2000000, 0x7, 0x8, "b5b23b22cb44c9c126626f4a7bfed69fe00020"}) 13:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e040004000280080005"], 0x3c}}, 0x0) 13:00:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x36c, r5, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x36c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x430, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x65a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf05c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfebf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x77}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f80000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9349}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff18}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x91}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x52ca}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa3}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x40080}, 0x400c002) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xa, 0x0, 0x0, 0xfffffffffffffffe}) 13:00:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x729900, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0)={0x7, "5a88f9"}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)="d695a58ba2508e4f3debc1504763f9e89d783efd7764a1eb65f313de4dd5523a66948e0b768d0cfd5d916311e7f9b5a75b6caea4ae8bed67b0898b2ed0be03e4e1d0427ac554c1da1920623d65666308b8f2b393678703c1") 13:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e050004000280080005"], 0x3c}}, 0x0) 13:00:15 executing program 4: socket(0x6, 0x6, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)="90efc40ff4ce67106f73f87ddd75ccc112dc986e28e8d432a6dd1a5f8ca54a18602cad3c245bf144e130c3def0e82831a59b35d373eddcc7480958ebaa930621386d046bd266") 13:00:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e060004000280080005"], 0x3c}}, 0x0) [ 1230.249885][T16015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1230.393030][T16024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x204, 0x3, {r4, r5/1000+60000}, {r6, r7/1000+10000}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "7398e8b36e214430"}}, 0x48}, 0x1, 0x0, 0x0, 0x10040}, 0x0) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r8 = msgget$private(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r9, 0x0, 0x5, &(0x7f00000000c0)='/^,+\x00', 0xffffffffffffffff}, 0x30) msgctl$IPC_SET(r8, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, r10}) r11 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xffff, 0x40000) ioctl$TCSBRKP(r11, 0x5425, 0xd74) openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0xc000, 0x0) msgctl$MSG_INFO(r8, 0xc, &(0x7f0000000000)=""/158) 13:00:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e070004000280080005"], 0x3c}}, 0x0) 13:00:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20007, [{0x2, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/250, 0x3b, 0xfa, 0x20008}, 0x20) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)="1e3fe1b76ed0b803af88553a5566feb40fa6569d1147a2e26583acc0f7a76006677257d017e19ac7d6672d114c39b35b41cfe1412e3ead9ad44dd86676fe6b2ec281ed4c6a866423fc49328028008c213a557c72f0ef89db206d34fc1780112d4bd3cd0119bf1e97a0e6") 13:00:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1231.629944][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e080004000280080005"], 0x3c}}, 0x0) 13:00:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) 13:00:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000001c0)={0xfffffffb, 0x8, 0x101, 0x2, 0xe, "9b8595c7c7cc9c4e374f6b7dfe5530675a342a"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000)) 13:00:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000080)="4fbf04383ad05e573abc787103f16fd772c8fb8b38d57001f21e6ecae251d9f189e7515d14ca1f80fdd24a2453084fb2b707002cdc210a5322d9fb780896ca2a38c06a618ffd953161d6b21d8138df39185aeffbc6863527b08dc6c58388a55dcd35b1af0e6c869c579b52350b13c1bcc3b1325b76000000000000b840") [ 1231.803448][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1231.935551][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e090004000280080005"], 0x3c}}, 0x0) 13:00:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x3, 0x4e2e6, 0xffffffff, 0x9, 0x1}) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:18 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x29, 0x0, 0x1, 0x0, 0x14, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x700, 0x1, 0x6}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x178, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r10, 0x4b60, 0x0) 13:00:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000000)) [ 1233.564788][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0a0004000280080005"], 0x3c}}, 0x0) 13:00:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0b0004000280080005"], 0x3c}}, 0x0) 13:00:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1233.701537][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x162c43, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x451e, 0x2, [], &(0x7f00000000c0)=0x1f}) [ 1233.823107][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800f00000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0c0004000280080005"], 0x3c}}, 0x0) 13:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000540)={0x9, &(0x7f0000000000)=[{@fixed}, {@fixed}, {@fixed}, {@fixed}, {@fixed}, {}, {}, {@none}, {}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000005c0)={0x0, 0x0, {0x6, 0x5, 0x1, 0x8}}) prctl$PR_CAPBSET_DROP(0x18, 0x2) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000580)) 13:00:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0xa00, 0x3, 0x2}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000002080)=@builtin='builtin_trusted\x00') keyctl$revoke(0x3, r1) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000100)) ioctl$PIO_FONT(r3, 0x4b49, &(0x7f0000000000)) 13:00:20 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x8000, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) signalfd4(r0, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80800) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r3, 0x4b60, 0x0) 13:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0d0004000280080005"], 0x3c}}, 0x0) [ 1235.153347][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0e0004000280080005"], 0x3c}}, 0x0) [ 1235.245454][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0f0004000280080005"], 0x3c}}, 0x0) [ 1235.320012][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1235.392743][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e100004000280080005"], 0x3c}}, 0x0) 13:00:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x90) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b49, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x0, 0xb0fc, 0x7, 0x1, 0x100, 0x0, 0x5, 0x22, 0x3, 0x10001, 0xfffffffffffffffd, 0xc55e, 0x0, 0x0, 0xffffffffffffffff]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r5, 0x4, 0x10}, 0xc) 13:00:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0xe8ca}, &(0x7f0000000040)=0x8) 13:00:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) pread64(r0, &(0x7f0000000000)=""/62, 0x3e, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{}, {r2, r3/1000+60000}}) 13:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e110004000280080005"], 0x3c}}, 0x0) [ 1236.667627][T16157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e120004000280080005"], 0x3c}}, 0x0) 13:00:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e250004000280080005"], 0x3c}}, 0x0) 13:00:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e320004000280080005"], 0x3c}}, 0x0) [ 1236.805824][T16182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1236.963231][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9680000d800000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e600004000280080005"], 0x3c}}, 0x0) 13:00:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:23 executing program 3: readahead(0xffffffffffffffff, 0x2, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment={0x16}, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0, r2]}, 0x7) 13:00:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) 13:00:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616ed10004000280080005"], 0x3c}}, 0x0) 13:00:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000304000280080005"], 0x3c}}, 0x0) 13:00:23 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x7ff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0x3, @private1, 0xb032}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, @in6={0xa, 0x4e24, 0x2, @remote, 0x7fff}], 0xa0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONT(r3, 0x4b6b, &(0x7f0000000080)="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") 13:00:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e2e0304000280080005"], 0x3c}}, 0x0) 13:00:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9680000f000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e610304000280080005"], 0x3c}}, 0x0) 13:00:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$llc(r1, &(0x7f0000000000)="2653e3fac3061fb0644cf5b2bed8ec8e17ffb2439e229516e0e55449a8df98c7bd1a3b2f44d96d6716616a1fef706e85ba43439beac1fbed22ae7eee55914d10a80db1b9bddf6c3b5f5d16c87f71db66a2b192ad4f39654cb16c485d664693d2dea4a036d23f7d66f333b658ba7a4e23b5fcab98fea9f0c3ca71ec8baea2aeeac0fe8d48d09f85d174a1611ba4", 0x8d, 0x0, &(0x7f00000000c0)={0x1a, 0x308, 0x9, 0x1, 0x0, 0x81, @random="6df418466165"}, 0x10) 13:00:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x66, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x3}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r4, 0x4b6b, &(0x7f0000000000)) 13:00:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x7fff, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x921, 0x6, 0x3, 0x3, r2}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x66, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r5, 0x81, 0xa, [0x9, 0x7fff, 0x5, 0x2, 0xf4, 0x9, 0x9, 0x8c, 0x2, 0x7]}, 0x1c) 13:00:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000504000280080005"], 0x3c}}, 0x0) 13:00:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}, {{&(0x7f0000001980)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f0000000340)=""/129, 0x81}], 0x3, &(0x7f0000000400)=""/177, 0xb1}, 0x40}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x5, &(0x7f0000001800)=""/136, 0x88}, 0x800}], 0x3, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r5, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0xac, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x66d4, @private2, 0xa9a}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x3d}, 0x3}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x3, @private1, 0x6}, @in6={0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x34}]}, &(0x7f0000000100)=0x10) 13:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000604000280080005"], 0x3c}}, 0x0) 13:00:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000704000280080005"], 0x3c}}, 0x0) 13:00:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000904000280080005"], 0x3c}}, 0x0) 13:00:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff}, 0xfffffffffffffcf1) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000480)={0xffffffffffffffff}) getpeername$l2tp6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x20) r3 = signalfd(r1, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x19, 0x1d, 0x105, &(0x7f0000000040)}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:27 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) 13:00:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000080)="f5046aa24fa7c7a718fbee25e4d57917d4b6a4ded22f385316933cdd8c50be2123dd52da1db047fb390469674b8ed25bbe540df2a4fa118fc78d042b18dde64339f5bb7675e985fcff8799ff9d0758feb8b8f742e93b7f42a0ef2b6c8bc91a73569f4abbc5eb0d120bec38169d4767904a36d620cb2f73d459843beaee243d64e2e172553e454a7859488f7779d3067ecd2e004cf517930cca51df9c44b3b8bea1fea7d0ec2f9de1e2dd92d4cb603a250c03366b8b4a6e") 13:00:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) [ 1242.213390][T16289] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000a04000280080005"], 0x3c}}, 0x0) 13:00:27 executing program 4: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)) 13:00:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000b04000280080005"], 0x3c}}, 0x0) 13:00:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1242.388646][T16305] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1242.463279][T16310] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:29 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@multicast2, 0x4e23, 0x4, 0x4e20, 0x1, 0xa, 0x0, 0x80, 0x2, r4, r6}, {0x0, 0x1, 0x6, 0x1fbd, 0x1000, 0x80, 0x2, 0x9}, {0x3, 0x5fac, 0x80000000, 0xfffffffffffffffe}, 0x5, 0x6e6bb3, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in6=@remote, 0x3504, 0x3, 0x3, 0xde, 0xf923, 0x6, 0x8}}, 0xe8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '.\x00'}) 13:00:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000c04000280080005"], 0x3c}}, 0x0) 13:00:29 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f00000001c0)="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") [ 1243.995770][T16323] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000d04000280080005"], 0x3c}}, 0x0) 13:00:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000e04000280080005"], 0x3c}}, 0x0) 13:00:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402402, 0x10, 0x9}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000800000c0002000e0000000a00000079414417", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r5, 0x29, 0x63, 0x9, 0x400, 0x46, @loopback, @mcast2, 0x700, 0x80, 0x2, 0x9}}) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) [ 1244.173357][T16334] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000f04000280080005"], 0x3c}}, 0x0) 13:00:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1244.276164][T16338] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1244.369011][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1244.412527][T16345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800000002000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001104000280080005"], 0x3c}}, 0x0) 13:00:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:31 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0xa02, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x364, r5, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x45, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x364}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x158, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb446}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8390}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd6ed}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @private0, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x13}, 0x3}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40051}, 0x4000854) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fsetxattr$security_evm(r2, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000140)=@sha1={0x1, "54021e2ca0a4bebc9f46a60a2158e1ddbd071065"}, 0x15, 0x1) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000000)) 13:00:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x400) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000140)="ab4ad000ea9b8df8c51507c27fb3e0f4103d52a3d72c640865d327eb57110ff30db86958fcc278a1205fda5fc424144b6f30c3ca12800f6418f45edcea65db35d36ecea1f5c09c6a3acbe5e793e0d8b925b09a838f1adc45f08b3b95e7e4177b05650fc87f2d01de6eaffa5beb54f3cccbbb02db5ff54bed603e74b9742849d9f3bd83fca25189f3caf824a7ac1c5db2e457d55e2e22a721a99134405aca763c9d87871f70b03add2d0ab97d58db409838fbda1dab58fcfafad7429eef39b80e8c47871e37b49f15e10a49822f0f3eba5a393ef66f9c21ecd5cb9d2a1241ec727b488ef1b39cb79fa40a5da83a8811") 13:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001204000280080005"], 0x3c}}, 0x0) 13:00:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1246.248514][T16358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e002504000280080005"], 0x3c}}, 0x0) 13:00:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1246.340985][T16368] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e032e04000280080005"], 0x3c}}, 0x0) 13:00:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:33 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10081, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 13:00:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x7, 0x2, 0x10000, 0x3, 0x6, 0x2, 0xca, 0x40, 0x130, 0x80000001, 0x5, 0x38, 0x2, 0x9, 0x0, 0x518e}, [{0x6474e551, 0x8, 0xffffffffffffffc0, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x4, 0x7a}], "6fe6a923033bb5c11574b234c833c9b14d8ea6b03d4b06729da5c79e0ec05889450814fa0a5d33a3b2b6c7212ca81270d335e9"}, 0xab) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$getsig(0x4202, r2, 0x400, &(0x7f0000000080)) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:33 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) 13:00:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1247.718834][T16389] __nla_validate_parse: 2 callbacks suppressed [ 1247.718843][T16389] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:33 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)="07b117297409bec9e53230b690030358bd1fcd595d5ff89b68e313fbd33755b38fa2450c6c7d5c82c3fab5717cf9bd68d768d2dc782d5df37377dcdd438100da968ce56e79b98a3c63c2d837175f0d63e2219cc44d6656e81058eaecd6eab9cf") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) 13:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e003204000280080005"], 0x3c}}, 0x0) 13:00:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e003f04000280080005"], 0x3c}}, 0x0) [ 1247.798284][T16399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e004004000280080005"], 0x3c}}, 0x0) 13:00:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1247.924491][T16411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1248.025767][T16421] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e884704000280080005"], 0x3c}}, 0x0) 13:00:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$netlink(0x10, 0x3, 0xb) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./bus\x00', 0xee01, r3) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x20db5bdb, 0x100e, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) [ 1249.266862][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e884804000280080005"], 0x3c}}, 0x0) 13:00:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e655804000280080005"], 0x3c}}, 0x0) 13:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e006004000280080005"], 0x3c}}, 0x0) 13:00:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1249.432327][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.580064][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e036104000280080005"], 0x3c}}, 0x0) 13:00:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:36 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$UI_DEV_DESTROY(r0, 0x5502) 13:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e586504000280080005"], 0x3c}}, 0x0) 13:00:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000080)="06000000204094a729f3f0ca30af4c99661597b78c0ff483e4199a900ad3db479726cc6c392419735eaf69a3d36b9ea06d42b61b") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x6, 0x3, 0x48, 0x0, 0x83d, 0x42948, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x23, 0x7}, 0x8021, 0x1, 0x5, 0xf, 0x5b5, 0x8, 0xfff7}, 0x0, 0x2, r1, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0xd, 0x81, 0x7, 0x0, 0xb1, 0x3, 0x40, 0x1f, 0x6, 0x7, 0x40, 0x1, 0x0, 0x2, 0x36dc, 0xfe, 0x81, 0xb9, 0x9, [], 0xb, 0x1ff}) 13:00:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e008104000280080005"], 0x3c}}, 0x0) 13:00:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e478804000280080005"], 0x3c}}, 0x0) [ 1251.507292][T16488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1251.636723][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1251.764666][T16514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800000006000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e488804000280080005"], 0x3c}}, 0x0) 13:00:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:39 executing program 4: openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/ptrace\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0xc7c, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000440)=[0x1, 0x2], 0x2) ioctl$RTC_WIE_ON(r1, 0x700f) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$snapshot(r2, &(0x7f0000000480)="125422a35d82fdfc148201f8bbd37c4084d0e13e87c14ad9f4c7a2a44e", 0x1d) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xb8, 0xcf, &(0x7f00000000c0)="cacf126c81aef9ce5a500d62ef0709a3d82bb222b4c6a28f94328198d13c916e1f5593e57771f3eca319abf887692770a4b3e485ee5822a90c3291f5d1ad75e3834be60a1223012f907e21fe6a679d600818b0a386f2843a73722da9aee8471f1c5caed3daf07b01eb0cf7d7aa5787c6e0d2cc65c10300a2e5891fecfdd80d7cb114de032d891082567f82551a1535b9e382269a23e36030feb0ba3e1ce7111f1121108b712e744cbe225316fe30caa4e5b3032cdbe180cc", &(0x7f0000000180)=""/207, 0x10001, 0x0, 0xa4, 0x87, &(0x7f0000000280)="8e107d3f6831eda6a482b8c7901b6782d1642149e866e37f233d785a56e99efe6f67bf63c2161ce297ed2060c05e628fd206b593d69550e5b87fceb219d5656e8f374454d3845c063a76a275f9b9b9f7340e1c795209dfdcab3da14dfb0b91cfe5efdc8abc9c63661c0c329957a9a3145ffcc48eab9ea6fa95850daa2ff5a3c416bb4d0b98191fb99d3bb09f054e4b66ae895cb068ad1996d9e5bf1179da99270db7006d", &(0x7f0000000340)="0beb6600de0005031f6e115ab28021e8502b502cdb3594cad1c479bf6e348c6b7ccc2b298cc16482a560fb66c85be08c543ff256268f03197f752716a5121966b9bc177bea2d19c733ef5c1b0a0a92478ee892f57d3f6f8aaf6dac3d9479517c6d3c76e4f4634417443d257e61274b67830527b67e546a5a3d2ee7782423c145904ae62bb74306"}, 0x40) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r4, 0x4b49, &(0x7f0000000000)) 13:00:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xdac, 0x401, 0x7, 0x1, 0x6}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:00:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x101, 0x401], 0x2, 0x80000, r5, r3}) r6 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x2c) ioctl$PIO_FONT(r0, 0x4b60, 0x0) [ 1254.023192][T16536] __nla_validate_parse: 1 callbacks suppressed [ 1254.023200][T16536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00d104000280080005"], 0x3c}}, 0x0) 13:00:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616efffe04000280080005"], 0x3c}}, 0x0) 13:00:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0fff04000280080005"], 0x3c}}, 0x0) 13:00:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1254.156635][T16555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1254.268935][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1254.285394][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1254.352924][T16576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1254.362281][T16576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616efeff04000280080005"], 0x3c}}, 0x0) 13:00:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="b5afc5e760f8efd7e08141f0d62982d01b7cd7d1e7180a780372f70973d63ca94ba222fa821ca79faa1ef18f4c79b1e232a7ca03c5ffbf790fa844c9b8d3c03cc703295beb81a53a767f421217e7a144570fc4230efe248393e6eb70e44cbb1a4d095f13a70ba105728380d2c81b6c94c9815cf6f00f2ea14ebf93c3e8d3969eb654e585494e962939b113b5687196f092240dfbcefb5fd445d7ebd124edc9dcce8d0a1ef147bae3f654d9b18ed4bd5be38940eb66a7cd8972a1c86c79e1d532a02e4a7c88e976aaffd0fa9aebb4e2cf1416bc8b27d6e88965dffd3e5ac51f2a99dc12cde5d9b644ea52ef6817", 0xed}, {&(0x7f0000000180)="5f00a4d161cd932d20bae6793d3d0d007fbe200f5a857eb5628f1844c1e7143638b93d8fdd23", 0x26}, {&(0x7f00000001c0)="3fbfb26c7bc1cc9110b473f02483b3b51bd52a0c6ce2435ec3a674cca086ed40b23df5755cbb905238492ad2153f5ce8d16d690c5b77af1a5bb1f75f6a872bd76068ae2870d623d6544a58680c557cb3b3de2e4d", 0x54}], 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x100, 0x8200) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0xa, 0x0, [], [{0x5, 0x6cb1, 0x800, 0x80, 0x1, 0xd33}, {0x6, 0x6, 0x7, 0x3ff, 0x2, 0x3}], [[], [], [], [], [], [], [], [], [], []]}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f00000002c0)=0xf4) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x3, 0x326d}) 13:00:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$inet(r1, &(0x7f0000002380)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002300)=[{&(0x7f0000000040)="c7e0da67e59bf482a9a7c13ee7e9d4ec616de9b50ab3dec5058ffe3379394892ceb3132cab9139d79ef92a7f15dd4bb0ce976762bcc617ce1cef6b1c631c7365ccfa73abc5528951918d8aa03b86b8fda90bd52c957ad5ee0a9c53989f236191dd06bd15198e1347af7f2defc4e54c5bb63fac7f73beb7dfdab555cfa8ddc2478d703b7c19e2da378f00c235244af49daca99bca540e6ca7e426a05e082ad7101f851a9df45661cba9115a9755b478eee061ec121c92d925a2de14fa40305a9f679995fbb1902515cec400af86e45104a3037ad4a2e77ff8be8b22", 0xdb}, {&(0x7f0000000140)="a01413532418c552d4f8aeeefb4755a5e167942a008ce19a0bbb2d3339be74fceb7149ff7eb48b4b806d776dc042f4de422a9f78ffb87258142fcac1acce4732e537699351935124512505628b39a7516a785dec5722db1215f07281bc37c1aa390f9e3c80eab4dfd3eb490ccf92d683a24151bea59c550960433c8f142fb21042ddc8d351dbbfbb94e1ef4bf640554cc97d734ab511d9c49047951cbe77b41c59e2bb574ac1f392f89e67f7c6a0c5e626bdf319c7e4aed445674ac8743c5a8eb677775715ca55688b1d9b567ac7cc58656a38258f485c4ce4300432a1875a4960bb843e9f0d860af2cdb2eba52fd943d6a880d2853c24338a753229bfa356ebfad034d3ce34a8d394d682e01820c1f940c2751bcf84f81e39904c633b0bd3f5cc8b7b8d21fb7bf234ca5d7d449c080e196a1ecbc73f19b1f1512bb2c70cdad6a8f9ba27ff75c5224143842a717bff89cb53488e2247002f23c03a0aefc190bfbcc5683f4436a849a4f5e8595aa2c0baaf05b45a9902f0493e5fb9d8e51b273d5f69212c268b384a8b0aeafdcdfb1987fca44bb1885c8f9d809a71ed7e6f7a9ede9831877760a3129b2f40bf9bd35400cc277922ba06880a60148dd21329bc384bf2b866c58d363726d6f5d569afc2128c5f834c84ab452b5696baefef1aeb2ee94270f63aa9d6709394b03222656da7a416fb30bd13cb3eeacd8207ba4d0c9c8a6419bb4e9e1fff6a1a76f55fe4ee4a89a77acf9e2343147b78fd233f204a98095f4790b9c3da5ae9e2a1a7fa91bf4ce3adec689f3d8e5517d6a9717785cc63ad8104b3c678d03fc6bf162b614df02cda4bfd34fba15d441b00cea717960ca09ddea66ca6e89ad427d1ae35514566712650ef68cc26d1b304d2282217cf9fab2cf804330f244e71b7b5cc7a1adafa6968fee221e598e44c7956cc97cc152dffbf65379c45d981e1c385fcfc2626c1e4173b8488a95372b8020eb1fdf75d7e8d0f6b64f90d6fe55bf6aa215d65eaac5e799db15d021a97977b626609051cbf04f05532d4284366d90c46e1b02f4566b4ac5d8c2607136e67b728b06ea9d782c689606d45f2b0a6c4dc52c448a87f3332597e7de1a0fd736567b5e3ea31ba73a4c200fe909af48bce3216cf77ea0c78b0024285d7d9160fbf8bee14432f55da1f0868eb8c7526488123cac14ea151c8a20b2e538af0ebac5ab4f9e9d6cfb839ebfd0f1fcc69a375f21b9de1e7c7d88f4c6213fa76f09f06d3647434e940253b32fda2dd11644718057e62506dbe20ddb9164ac4cc7229d63fc2e2679486f5b0a2632225e197aabb2690fd803e12cc9ef85207f45ae44508a4a1fd90ecbdb7e57da97f7bc9bf529c17aeeb670ba0b7172d93c4c6fdfcfeb824bab08207788c280bc89bcad7e93b6422a2656034051ea3bca93b06bb31b7e1e7747e335f1fa9e3454ddde40486aa260996f8e84b41fed74fee0283284b7abb06d96a24d87264b87f2511e4436ed735993b5c8a4c9af4cdff03454d823bdf1fe264ed06bf91d63a62f27338bf80af86a3533b2037a89cfc7f360399a89f4164334ea5d27c9caded530625eaa2280fea17752aef48babd02c39277dfbdefacb8f06b18c02007127199aca9a4b339cbfaf0b5061b2f7a00711fe0e90a7d4ff29d30dc28d4c8f28a838b3a1bfd8a4443689dfed90dc9e277218bee61572083f5efd6265ea597d41f6c3cd7f9739a427e1930755033e13224280cce99e748f09105a1ead70e7eda3f63442698f7d6224a6f6fd9872a9ce272f69009aabcaf70cd88de786ffc2c4a331e6222e0d84b94b298a46c717a5a86e08efa81d2668e57f963291847f5dfa9c08ce6ba52fc909731d6b1b0fac789c31ec3311cd66fe75d066fb0fba16690685af9bd54361a75c6a1b82c28469d3504f88ae7bf7f993fd3ee163dcb04aaca0e2a6385e0a4498c594605408513ee7afbd0e047d184068ba09b7451cc581521022e61c5c4910879b17b7beb073b90ab2c80c273db31817dc9498b86deca494a8555207a88cb7680a39874c0fa9e777519bb2d8fba8ea5ee75f19e1d97e7afdc811b621e9a0d2dc0c4f8e70a7407466d70636ccf4fd26f643a48517ea5aa3a74066e5725aeabab4c90099784043b44cc9eb8f97a8eea646afff9893252411bb191921559b32f8b54592bf418dcf9ad0ff8e92c706a163abd919d563aa1fd5e38116b5e387afc9c25e1f41111157f539596c1ed1faa8050f88e5055906233024016eb2a8bcde6ae5922c22812155bd66cae0c17a2f95bf14b2da7882daa5ca5bddfe83dd8c4a48320eafaf8ac36b350ecc8e679518763cc9507144cdfabaaeb61dfb44f0659b6c77562d535b0ae57a5b015cf2e650a11134358d15de0d80dfa228167e2b5e713f1012c50ecdfc2ff01f2e781d5567e217416c207ccc266cc1a1323070f34b4a431cdfe6008134886306a9a84dff4967acb1d6d7ce9532335274d7fe1fc1979f386a93035390785c0dab474788d370fb929fb3f2d3973acd8033757224434958c75a9ad6896880b5f0bfd28b31e03ba0a4f0f4948021a778190812f6525036adeb17d3baacdcc8ad4de905c3a782cd162458cb7e795fce823fe2dd5f90514b8a1567342febf2f188cd0e4b20d7b34368a961e27aaa0a1811288209fcd6f3983d2a786fec54bf59e24b62b9e6de3bfaa2a33db1a4d2310f42c92f9ac55cc34a483f363c6ddc6fdda7234af7fa2e66cddc99d257bd285315215e70d0b0f8d839c2587dae511fd86267643ff1a0c4ea2348153c5f0438db8e36dc9101d4a07b5fbc7adcd5cc74852d5554716e4034ee0b8bb2fd16972b1d46c5ea73299fb4aa3859ef37d98e868f08eb3e054ce4255d84bfa704ff2bbbc17d1ce0b5f0a95f31603853acc93b3ed3412234e1cf384b1fec33b7aea9a4b852d6fbb3c8d198ad2b911e8cb140731537722bdee00e59b3475d6d943ecc58d297277c449e5ffb46026d87daed5964e6b99372def9ce6cf7394ff1c0c566ccc301171343d6277c8662e63c2deef4a1bc27c9a2e228009cb3dd950bd8f382355ffedf2fc5dc797fca55dbc465014cf2b5f399047c229ba9a7577b5f47c82b31c6e2930dcb24a9aa92eb3538b22c0e8a4e49b8c2881961a22b186de8d71b4816d3ea7e2cc3322e758e51346b8a13ebfe9efc46b345992f6979b8e18c75cb5e2a8a7f3fcc1b626ca3309a796803092a79f23602c110ebd02c76154b599e24c4ef6c840fd89d562bbb1f73cec3cfb9da0df9b7e16d3c1f3e0dfec7137779bfcd4607554012c37722302b866a2f508784ba25eceb4a026d611f87f6933dd053890f18476ac4a0b6ee2e2b5ae685c827322ff95ae335179bd5e8ceb6fe00178ed03cfc118723b6446bf2a04092074c6b9bf03543b717c31661595cc2139b3d127384d353afe2bb052e62ecfa7b7013acbe3f12289c2d18dba010f2977bf01d307fb6528485c8e759823c0af2d190c67bf80734b86b601c1655815dd653deaaa496a884665ae15492063895c355885146f7acd63ddcc98f7d190ca188f3d7a94bb8be3f9e4f0fe2e06e7c3cb40120c2b2392a9a68166317035c9b1a0e67134a5ac642cd07675131f1acc904afd793d73c75d4c7deeb64188f06f09532cbd3f01ece02e977febe0e4de3de894e738e545f7c41cb24ba948431b7572e27121d2c672ebfc77ca2c5bd2bfd25c9c0508275b9e21f8e113298d9ed9b037ba00a8d9ac752fde16667d3fb0835351a3eef51ace0ca0f004d33cc05757cb7029c7449b5f60044530c4f6ae094bf0e84fde0a05c7d9598cc458f7ed2c96ee1ba3a581faee00580c64994e0bb78c6e613601f46dd7695567fe5f754c2b5b679754ae4a2562d48bb085bcbaf463382ebf4441271bdaf5642d05e094d19652eca162acf2e8be37c579ba56d929608fce3627d4d68e8e63e7eb1c8a2bb328e9a15c3a80348f8edf3f00d2d75d197b0bdff864f47293f48d5148c85d9ef6aa393c7e17298bebf2f5359cf35fbaea637048541d9ae55f7ec1d5d0f203b34572db75d977adaf959a28a06b10af0d5f6e0e4f7f1a79f252656d110f5ca3dc3b18d58634b0529eea74a995e939df9dffef5a8ba774a63ca4764c54cb5d2d3a3e3391623fc2da669117a26c1645050073327b5984d6cbbc4d14aa036313e4641d851b44705183bb103e58cadd0270a2025b0e78a3c90c02036e10ffeebb98eac7c9151959d117036d5bda39177f709ada93ea866ca0752210de22d7e0ecf639ec5a78cefae07ef5f84312429a67040b44237c81bc491aae2db3a129e7037d2767e4619ff7ade7d5aa968ac90f337918a14b4ba9508a548c9c4e0f538b8788d81f7ed421bd5da1de1ddc5f1697ae7672e8170dc298b36faf9f5a6cc29979c0f8b2bcf33a60e45b14791b09a4cfb4e301e14b5a9e401989b9dab82dd147ec76e07d9537bff0668bad97fec99ae285d2b7fb55e565d1312a8f12b2d1f512d8f02025ef5f64ded432e63e90577aeb4a490d1e1c7079f726fbc0ab89dbbf1f62ee4d448fa8ee3cf6f89e83c000a77a2e404037dc5777e17559aa16ae5f51acf12cfe40dc0b4633a371e6ae799eee165438d89b4a1c67bc48c731d179fbcb3debbb31f2325f5baf33e5118171e36708a5e3a442374b601dd9eb83bcd19c9f07f25ef138db11972562ca159c2e0cae8d805188def352c3d6f9a254ac14ebf1c76fa8c643fdb3e3fdfed479ef71dac0d848417c3b57ad9366ff84bdb812418c1c774248083a04af2545a6586dd720e57def53ea58428a2a6235bbe9a3dd02f5c159e09629caecb6d9c14e1948baf82da41e4a8f5c89742f24e4d91ea1254f12623f24c9613492637cfabd158107e86ee97293da849638b38179b99264ff66276ceffd8e80f9924af0a4d6915bd32a47cfcf6f4dbb53de2808b6e84a03f1d210041e0a7b590d638b283313441ec044498b8b8e2bed9b67b3bad9df155dfacd694b448f770b2cad5b2a97ae594973e6121042eb2f646e8ce3327bf032262c74467aed0900295e7cbbb2a094fbc1159b7aa27794614c4653b4603264ce83ad2efa69266b1851f40dac94edfc0faf874d0370380a835a2e831f837221e5581148bbaccf812dd7b426a774e4f47c00cb54dbf42083876b84bcc0f83ff3d40b0f0007e8fa17baceb9e182d7490b657f2da612283b7281e175743c412d4deb67570d83b42df6690e30aa328cc5c3f6fb003be6c0d9b10ce06ff72a17eca95d70edca81e8a96a469678d19998dc8e32ad6ea435db4ff0dfd9da98d3647a5db04988a5713445afede3f312cf8f94647f49cd8bb495d6d505d13e7235bd53c325f6f0b657217bacb41b4dff4687edc01ea6b474b9b39452ad947ca6a48225585ae224320674fe8f30bf0d5dc8d92a1a73f226d3ef75bb2d41dd81d65d300b4babaa2166476bce75d53d588d8757d1181247219c454fa2fe06626d5bcaf45c1fcd89ab528bee2c6afdb5b98933526984a3573b7851608f74c465221444815f68b04d9c6b5bce5311bb627d1ce123c354900317bd8e883a82f6ae207db77c799eb8796b1e6e81d101b67e9458713b15a73d5c4218e6cbf6aa32c1bbc3103110827c083c8d585e0221ba47e51f1c6fbd44173490d347713b93c28821a233ce53c63110b063668fbce61aaac6917194b393a66b41b64a907fd50c76582236b468b306a599dfeef3ba9f373a63a2ef2f7b68442ddf5fa0c9b556304a530080bf407f241d0cdbe1a8b123d2a726c6964958b7b32d0d6c02d5e44c4b839e36657fc175", 0x1000}, {&(0x7f0000001140)="37d70d7f37874e400dfe90444f6a6bee6af2d3fafa6370a40b476137e7760d158be789de190a3310c98561a3b568416fbe62cdda5cce6b419cbcaf439baacfcb82f33e6a909e22e1ddc6e5155a2ac6e9170dd362b45e02b6317c148791d83d311127b4f452d4eabccd12a578894e3fc76e8fa68c545be402b3dce45cfbff4ea5fdc4b54c2481e6e76337f5258d83485d188278e2898d3e03a5175c63924f263598bc4189f6627c6aa4797dd9b9455fb6c28ca1013dc7901e03d29fe29efbfd78c56b7787e8", 0xc5}, {&(0x7f0000001240)="8aaffc775fae07e1809fc8a5c680a6318eb9dcd9d8d932f760474a33fbeda81cec", 0x21}, {&(0x7f0000001280)="732c93c242b7319990fdac3ffa2b11a709013cd37fa04784d12f3e966dc5fae341bfeaf079ccade38508c5c175cb51536a465b22458c6d7faf15b16fea923421558d2a81ce3e7cdb8cae86dab4", 0x4d}, {&(0x7f0000001300)="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", 0x1000}], 0x6}, 0x4011) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) [ 1255.556613][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xfffffd88) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="c2986ed7a7134b1718fdd6f89bce1e2e", 0x10) 13:00:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000000d20280080005"], 0x3c}}, 0x0) 13:00:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0xb}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x363}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x12}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xb0}}, 0x8010) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) modify_ldt$write2(0x11, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PIO_FONT(r2, 0x4b49, &(0x7f0000000000)) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x800, 0x80) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) 13:00:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000000da0280080005"], 0x3c}}, 0x0) 13:00:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1255.626152][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1255.753551][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1255.770665][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800000008000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00d200000280080005"], 0x3c}}, 0x0) 13:00:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0xfffffeff) 13:00:42 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000600)={'gre0\x00', r3, 0x7, 0x10, 0x6, 0x800, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x65, 0x0, 0xfc, 0x2f, 0x0, @local, @remote, {[@generic={0x83, 0x3, "f2"}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x198, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4040081}, 0x1) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 13:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00da00000280080005"], 0x3c}}, 0x0) 13:00:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001001000280080005"], 0x3c}}, 0x0) 13:00:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x1000}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f00000001c0)=@ng={0x4, 0x6, '-'}, 0x3, 0x0) 13:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000003000280080005"], 0x3c}}, 0x0) 13:00:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000204000280080005"], 0x3c}}, 0x0) 13:00:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SIOCRSACCEPT(r1, 0x89e3) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/185, 0xb9) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x2002, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000140)) 13:00:43 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x1ff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1]}, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b6b, &(0x7f0000000000)) 13:00:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$TIOCSTI(r1, 0x5412, 0x237) 13:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000304000280080005"], 0x3c}}, 0x0) 13:00:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000404000280080005"], 0x3c}}, 0x0) 13:00:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000504000280080005"], 0x3c}}, 0x0) 13:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000604000280080005"], 0x3c}}, 0x0) 13:00:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000704000280080005"], 0x3c}}, 0x0) 13:00:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000000)={0x1, 0x9, 0x6, 0x0, 0x9, 0x6155, 0x8, 0x8, 0xffffff44}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 13:00:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:45 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r2, 0x4b6b, &(0x7f0000000000)) 13:00:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000804000280080005"], 0x3c}}, 0x0) 13:00:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xfffffffffffffffc}}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x1, 0x1}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x0, &(0x7f0000001000)={0x77359400}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x6) ioctl$PIO_FONT(r0, 0x4b60, 0x0) [ 1260.158661][T16725] __nla_validate_parse: 20 callbacks suppressed [ 1260.158670][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000904000280080005"], 0x3c}}, 0x0) 13:00:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1260.216298][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.272117][T16747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.283032][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.335879][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.348454][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.391660][T16764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.404696][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000a04000280080005"], 0x3c}}, 0x0) 13:00:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000240)={0xf000, 0x3, 0x6}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000300)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x3e4cf2c282b343be}, 0x8000) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x40) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000140)="10918f19ec1777faf21d4d23c35f8a1753784bc052128bf8de35e0b2e0e889e3b60d4f52ecd51ecda8266f00"/55) 13:00:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000080)=0xfff) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x5, 0x30452354, 0x3, @discrete={0x784e}}) 13:00:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000000c0)="e6bffd5dad5138b07aabb71519aefcf6c5f90d7959520e4ca2aec2d3c4ed2678733f44ce4f2a96923d2662ca4c13dbd2737411d0015500c582bf7d01ae19ac4c23f34e45ae019fd5a2293bb8a04ec6452a67576f7c34da3b29b6ce5cc51deab16efd3f7a0ac48afebe547bf9e056d0addd8054adef2b29", &(0x7f0000000000)=@udp=r2}, 0x20) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x1b, &(0x7f00000074c0)=""/102400}}], 0x40000000000017f, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) lseek(r0, 0x2ad, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b60, 0x0) 13:00:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000b04000280080005"], 0x3c}}, 0x0) 13:00:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000c04000280080005"], 0x3c}}, 0x0) 13:00:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000d04000280080005"], 0x3c}}, 0x0) [ 1261.788305][T16780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000e04000280080005"], 0x3c}}, 0x0) 13:00:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1261.915662][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9680000000c000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000f04000280080005"], 0x3c}}, 0x0) 13:00:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) dup(r1) 13:00:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)=0x1) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$unix(r1, &(0x7f0000000000)="58244fa87b13d1b71ad96c", 0xb, 0x4040040, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 13:00:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001004000280080005"], 0x3c}}, 0x0) 13:00:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001104000280080005"], 0x3c}}, 0x0) 13:00:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001204000280080005"], 0x3c}}, 0x0) 13:00:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e002504000280080005"], 0x3c}}, 0x0) 13:00:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:50 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b6b, &(0x7f0000000080)="3de6c04d171955e77e0034af83605e0032ea8061a4d042347648af9565e7767cce9a45f3f5510f9384a51df6aef12f9af4343de051dd9ca07355524ebd2e16e7a98b58a993b9761483bed39479e2ce4306616dd230b8e53b9b2bc678d5902f") 13:00:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x5, 0x7fff, [], &(0x7f0000000040)}) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)="3a88f6a65c94ba61b3b0e3927ce15bf610e76df281d2824836df7a4dd866e5f3") 13:00:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYRES32=r2], 0xfffffffffffffc99) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x52) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xfffffd88) ioctl$CHAR_RAW_RRPART(r3, 0x125f, 0x0) fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r5 = msgget$private(0x0, 0x20) msgctl$IPC_SET(r5, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000180)=""/62) 13:00:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e003204000280080005"], 0x3c}}, 0x0) 13:00:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e006004000280080005"], 0x3c}}, 0x0) 13:00:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00d104000280080005"], 0x3c}}, 0x0) 13:00:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000005000280080005"], 0x3c}}, 0x0) 13:00:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000006000280080005"], 0x3c}}, 0x0) 13:00:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000000)={0x0, {0x3, 0x325}}) 13:00:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 13:00:51 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001240)='/proc/capi/capi20ncci\x00', 0xa00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001280)={r4, 0x7fff}, &(0x7f00000012c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001300)={r6, 0x1}, &(0x7f0000001340)=0x8) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x266281, 0x0) set_thread_area(&(0x7f0000000100)={0x7, 0x0, 0x3400, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e01, @loopback}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000040), 0xb83, 0x10001, 0x666e}) [ 1266.153939][T16915] __nla_validate_parse: 12 callbacks suppressed [ 1266.153948][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:00:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000007000280080005"], 0x3c}}, 0x0) [ 1266.196875][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000009000280080005"], 0x3c}}, 0x0) [ 1266.275464][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1266.328351][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000a000280080005"], 0x3c}}, 0x0) 13:00:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:51 executing program 1: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x202000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x70, 0x85c, &(0x7f0000000040)="f97eb603b578faec5652830b31cae688b5b6aa32b922ae83dcaf83872afb05ee79f104b5f5b9f03963efd1d9346aa8dcd34158048243ab6190260bf9332c6bf970fd451b4a428f3e42b38283060296711547da194f3baa91b7fffed943dff0db1fa1c5c88e723216f13a2f7862d1b2c2405c938c43d196f7601295f3596e38f5c55605402786ad4a81f4c2aa", &(0x7f0000000100)="38e29641f2f2432c4355a8d66c1ee8276f6024fe71c9592f894582eb42033997f3bb6998b93d37b91783699a36b933074303bc11fcf0199ea479f79b6b0a0e9dcb67b4389bf829f672ff91e70827322b8357fb890b76cf9fc6d60b84b58e7e0f21c00872efc171ed78c48f667696c35d8ea7fe77cb7d59f359517d0e8be3175e5b14addff86d6e5a7470686c3b64eda95ae6d5884696b4cc5ea4c126ce3481b58f599ec7c9d5bcbc4bed1023689a1b1cc773e6cec929fe4dea105265c17fd9cca1fe23377005821571e9e1daacf35f9f09a1a14aa9c3225334e320263a380d5e814ce3bbb9669239f4476e36c4ccb9a7a930492e54b524488e", 0x8c, 0xf9}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x5, 0x6, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0x10, 0x8000, 0x6be7c931, 0x2e23e671}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x800}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a0, 0x0, 0x15, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x44000}, 0x850) [ 1266.355319][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1266.454825][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1266.460207][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d9680000000f000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:00:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000b000280080005"], 0x3c}}, 0x0) 13:00:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$FUSE_DIRENT(r1, &(0x7f0000000080)={0xe8, 0x0, 0x1, [{0x3, 0xffffffffffffffff, 0xc, 0x5eff80, '!\\{[@:%\x8d}]]]'}, {0x4, 0x200, 0x0, 0x2}, {0x5, 0xf445d9a, 0x12, 0x18, '/proc/capi/capi20\x00'}, {0x0, 0x1, 0x12, 0xfffffff8, '/proc/capi/capi20\x00'}, {0x4}, {0x1, 0x4, 0x4, 0x80000001, '@@!/'}]}, 0xe8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x84000, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/34) 13:00:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x208100, 0x0) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f00000000c0)="029985e76486e1e0196468c9a5f5ab8b3c50308d3275065905f3c19c75cafef34d73612681c022b73561ad17d8a24d30c45f047ccd55c55ebe75c5ba00226f218c3a5945de88706f51743dbbdbd334e84a921037dabc80563a7af9651c8357d832f8145338201f1d1a5961c7dc6d8ce2d397c96f5bbbaa37dc99b7b2dc50cadbcb") 13:00:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x10000, 0x0) 13:00:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000c000280080005"], 0x3c}}, 0x0) [ 1267.644164][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1267.679667][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x404400, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000280)=""/4096) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x66, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYBLOB="0501006e83bae8fe0889f38b674c90d1434818ea11f09b37afb59755fc0bd976053dc1c817bc37e80c8eeeb74b"], &(0x7f0000000100)=0xd) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x145140) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000040)) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x210903, 0x0) ioctl$SG_GET_LOW_DMA(r7, 0x227a, &(0x7f0000000180)) ioctl$PIO_FONT(r0, 0x4b49, &(0x7f0000000000)) 13:00:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000d000280080005"], 0x3c}}, 0x0) 13:00:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000e000280080005"], 0x3c}}, 0x0) [ 1267.773524][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:00:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000011000280080005"], 0x3c}}, 0x0) 13:00:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:00:54 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) accept4$rose(r0, &(0x7f0000000100)=@short={0xb, @dev, @rose}, &(0x7f0000000140)=0x1c, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b49, &(0x7f0000000000)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x1, 0x7fff}, {0x6, 0x2}, {0x4, 0x1000}, {0x3007, 0x9}, {0x200, 0x8fca}]}) 13:00:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000000)={0x2b5, 0x3, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003700)='/dev/loop-control\x00', 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc, &(0x7f00000033c0)=[{&(0x7f0000000280)={0x35c, 0x1c, 0x400, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x95}, @typed={0x8, 0x25, 0x0, 0x0, @pid=r7}, @typed={0xb, 0x50, 0x0, 0x0, @str='context'}, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@local}, @generic="935dd32962c7bc6c3bd1c0fb680c0a1079a1e6d98595e131e45b047e4824828f35db5f0fefb1e020308c426336bc9535a4bcfac0473b592fdb7b5125af92f441d6292d97b24de7cd63d46c6a7f7ab722f438fffc262f518a74c50cd285b287cd29bc242ccd991f4676bf3673d328e8f12f3d9325759bb0bc2d7abf294e289c203a04a2f85c0195965ac523942a174169750920206f1c09297d6e6dfc50cd9e0336e71d9e2056af038ad0cb17f9f69da817e2bb6d2a1a", @generic="950a91f13cd887017bf735db5dafc676160634d707936752e4bb1e0308aff8f47d2090f8148c9054957b6843ea307970b5391a3d33b060814d5d5566b6244dd9ddd4eef8cc67755f938d20eeba623350c075f45090fd6ad6cedd700b93654bda4e358a1957072cbb118f98939e69285814caaa82d4914bd3666ba4ca33f6789f228d1c734e6251f2eb89933b0284569870f105b720e602a15959dec68c4e36609460a12b46bf25527b85b6fc45b8e9b8e5", @nested={0x184, 0x51, 0x0, 0x1, [@typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x7c, 0x0, 0x0, @uid}, @typed={0xc5, 0x5e, 0x0, 0x0, @binary="1991dcc868b914b12509ef812c1d18b39c6f500562822826308b62bc7eb0b4d588d02d03db26998d98edf0c05f26a06aebbfb37b9a92587aea81038f1df1bc979f1d199d6a795b731e621c2e577347f976096839719c27f1468548eefb4695a28c3016b31fc8cc10b9fcba651f4b9031abda4afdd4537ef65864cadba6b151094161327646409750fa753e23267cbc8a80e3331f71ea0de7c6f67ab32e78c81ef1be0243646adb9fad7d58a2dc2041987590aabb5776255745567c86d496c092f8"}, @typed={0x94, 0x13, 0x0, 0x0, @binary="76305235ea954dd3f8942c5692aadc4ee85e6b1d28a0f0545f1c14f00282238f7c8e92fbaae97c1f8a5a5844b8c6a598892ed568b2449530f50fb5039816b335d1bf90807d34a967a8654dc192e3c3185cbb18a9bf6b14ba259b2402748a0c32b0fbdbbbbe23974ee6ee27a432e82abd2d1837628f5f394c89a052965c7ab44a9558970ede153cfd77cd8489b3e4fbd1"}]}, @generic="0c31118a7f66b2160791636c9e3678f123d16905df5a9af56e315f36ac140e1f54b2d3b7e43ddf026ff8519dc13292f0fefee4439a57d8e3c89fdc82ad3408"]}, 0x35c}, {&(0x7f0000001c00)={0x158, 0x3f, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x147, 0x98, 0x0, 0x1, [@generic="232bc91637f7b6dcda138f3c34b6f57325bbf802ce66b1f6f56c425df35c74552c07e5f9d468c21528830db60e29934e7c0903fc73d8cdd54e4e756417f4aff2786e3eb9c14dc78060a45e6b361ce5cc10f9a36d403729f5275923b70add85ec1ed9f4a804fa7e101a", @typed={0x8, 0x86, 0x0, 0x0, @pid=r4}, @generic="27bf2e492b18a0043b220afb8a18cad355b1f93cd5a6a5c650be17504788011ff3b2b8e5aa09bef4f3fe8a54e49b017b78e6a1253dfd52325ee95ccd6159081e5532bf2225328365bbae68335efe39a1aec5ccab226626caa15e8d37017505d19fb46977581e03d05904e9c8245871fce2ea2d96bd60564bbc39a6bf90dd9c8e507411b9831d12582e4e259efe385a9c951423f7c33f5ec7e40dd0c6b27b7de4c72bfa6f01c938f88dbd2b53ec47e4402446430f1fc157347bde9ed95375f35379d438c42329", @typed={0x4, 0x68}, @typed={0x8, 0x89, 0x0, 0x0, @uid}]}]}, 0x158}, {&(0x7f0000004b40)={0x149c, 0x36, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @nested={0x112a, 0x3e, 0x0, 0x1, [@typed={0xc, 0x28, 0x0, 0x0, @str='nodevmap'}, @typed={0x8, 0x65, 0x0, 0x0, @fd}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @generic="d50d833cc36b2d851941e256dd4628de3dd13dfd7575c0db7b6559ad92e6d86dc1246e2e19ff0f6e0bc0ae94a04b5514f615db56d2552b0aee8d6c53eb2c088f6346e28ac145beff542a85b3eb8cd8328bbc99d61d414733d24e508af032511f6dc57b4f5913d4da4e5f2c1abc82ef7574e5e8aada8afe74bd7e03e0f121665e04465d72ce4882c48d201b2baa4e5b3d5a43d499fa2a6daa9a7c71a09e3c415b0681f8c639bd3d95d0b2f0a49c5265e0088387b22b21a2a3538688e1527583b6c86c7b12e5f0a1380b6ef27a0f809fe8", @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x3ff}, @typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}, @generic="e3c36aa0db0987e3c4c18194382ee0cb858be2cfe74a48bea301e2dd307f", @generic="c1c16f830de5506a178e4d33801538d69e8933b4719c5b0f8e58c90e95839f2cb15a2765d9b3600af498184dfc54eba3a42090533d871499dc4f405dd7f46ff284f1efcca88966c1a54fd0d57ef506f1ab81ec8f94c31370a30d07adeb3a1d58780167e449c25da9619e30a38480e157fbf372cb11edb9a0a63361f36897c4523fa27f90d492d32a0e75d824764c920525bf4aff6d3450f5c3847ab64b7fdbfadf2db34ff4b5df40f511f3f1318a4907204a868871631e54f978a33a1674ea717d7dac2ae555796c95fab56aecf8d4d78419796cab6d91df97a88549462a98dd2b797605fe0970f6c3815c3f994704b60069ec6b669ce36eeaeb84d4c5d7227194e11c340d820f498ba11626749e62856ac1c957a60ac66c87f36bd1b6b3581a8e33597bda5810650d285e11b6dbe4237c3c82b41314b45b4428b9b9cbe28bc8aac697ede16824cc1a2398dec6e2a6cbf96b68590152e21f8c5bcde8904e72ea8a86ddff88cae504d6fe04560c5d2a8b75fc7635943a52e8ac76acfedefa4dd9a8a6c842ed054fe677c626eff76de4b651a0729d7fdea7d09fcbeb1e176d0d55533bbc35b22b94f2e5a247854efcbaa32cad279339b0814d7f0ef014f6467571203478733f225de621adc40945d614d2df2dc43092c09e144960e03675dfe01f36f0318e29e6a4c9fad8812f5655f747223d8105514d3e528ec3c956d849524b032f4c047dbf517d20ec59c5185ab4ae9b83e1d65d4930805e28193a70816b9089bcd024576990c3d326d53700c2f3d5f3127634bfef0fe143b2440202d5bfa88e1c188b3bf7d876dcd961e79a966816aa79ade2369f0b26aef75418dab3f9678d68ef763f52bdfaadda8e4dfdc9251173bd3a4f9be3da745d9f0c99d9ac8adce69d6250e8f4454681c4c3a853c99df1f939f905c9019f2b35b723fee4666068a7416d1b26e5a04d2070a06a131d5eb9d73fca50f8c59b3700ec4f32c06c5433a5939171569659e2ebafb17595d89e706593ff8a60f9c2031a82a02da1092953745fbe99c366eaad892184568307e505de81ef9ec279db684e748fccaf3250d775d68d75bb308d336382b5fbe12250739689b7be679b144bf5c3276f3a03cb322c47aec72cd7b6c67b149305324559f0a903297b92e848276b58701b62989f1f4e6917743e2fe6d262a0f2de4a068cbf127a877e281f65c26260ae27bfbc07fdf7c6adbb6446e997c7c41ec8b63c39642956c0958005be44ed19ac440155e3b344cd3815a7ac49e89cbbb1c274becf0618695275649c4f896f3b7e8e8bde9247b79126da6eeecdba4ece96eae08a3259d40f9b6f6d09052da8ed5831b88607e83fb43f531adeca723504435c90eaf7ca2f1bc926aca87f065897ae906fe2b146162dd5ec90b0e039c94072989a86bf7bf4e7fc3d786b368a7875409bc4905d38419ab6a2c9566cc10b95f9dec969d57d849d69c6263c7e0c425397ab42569470a70ffdf6e0c48235f8bacd6c464ed5ab60f1784087cbeb00265b4a08e5126490e1da91536237b14200ed87c6715ae0c15cd06f69c27c8175962cf7ca279c528fef5f7e043d7a9c85afbb26c682736aa281d99d0b0595c648bfe0fe8e4a22cdc221f97b17fe10c9916bc250ac06f52bd7c6bb01f805b68d8c9be1beb49834675d2230f48d6d3d132b63d1231825f4f43cc165735d7a7a147cb2a3e7709ddaf2bfc2c486dac22b03b307363b56fadd977ba67a03db37f5522712429d1d081ac6de68926bb11af1ef01ca1b4001590dd3ab7f10329fee30db15f1ed3e56fefbef66bc6202232319b857fb19e054b9234934780bebaf68658d6dad5bc7ba4a1e9c7a10160ec05d801e69bcf4c82c84e0c6f904a69a5ef0a3c89cb798e76e7670a24a0a1e8b3ba672787422aab2cd10cb184311d17854cd3ea0ffb78fba36f8c1315698ea462a9a50b0e5f74b28d8ed7810e919a61de69f52c59249d72b60c94ea697ea2fa0cae2bb5b425c52e630d3a31376c64b750dff473835eadbddb245a5147a40de304028ec89f02d8dc008bb24f379d7aaaf1dadd200758c11f9e2d42df2ec036e20d7a36411dc40d06b9dadd63f1b15835906df8170f1ccb47b3cacde91db49df8fab8780ddefe3c30512dcd721df47ba07d04e6a7b5f3c49aacbe0ec548b3ca6eaa18dbcea2ae487d71fe03054c37657d2702d28466044544b98dac00c88e8b75f068d33d7c371f1b757a442e8cc96da3cba69dd8676016b84380e3527dd26d9932b0ed0dc92dc293082f536eb9731075b03a6ddfcf1ea6246765e6d0359dec77342aa3affab94b06d83a0ce3eb6f302b16c66185df2388ef76b2f81e8b7f8179dfeab2187be4c164472af9ff9068862702895cdbc819da75bcc433834f450589ed745b189382271a14e0d2667714aaf48f2bcaa611f1d2458e7a50eb4e3d855afec974958af30b2d77b553fd073c6a17a256d6aacd1bd3f5fb6c07a996015909a5817a913dbb31c618131d7b558964bd79462150d78d1a1789d46433444103c48740d6196de316062cfc0d52915f1af04651ba2389dcdcbf875fad2f01787fc32949b31dc4e967faa4576713bb203ec9296fbe05ae9050f0ebf726b20515e018b57ab58df5192416dde45e2e1a6ed5979825beae6ce7f1b802f7de49ca8fa332b7f1c5e34f80acab6ff99a7a17c65c976dca738a7ad065b6bb8a13d494fcd01c20eec84821ae701bb7b4bf57aed5e93768da273bd3f563485bae252e90424139e179a0e42de2c50756b975c7b46c5c9ac6b15e5b041c7dca89a103e7c005b90dae3426d8f596b46fd455fb5f7ce89f63c4e3f5ddca1865c13a1c9fcd6baa3676b5ce1c8ac0923a4703259d4f160ab8a9e9aa04fdefdb791cfa6274652f637c68bff81eb053a0691a933c13abd0ceebf59f5470dd722ef2a4236fcb2c22c841187a7c92d7e796d3969a64b39ee059ae10311150b22a80211bc5624084d859192971a16d9cf3dad0a21eb97944a680b66d2dac127b81c9a3c0d4dca9a6e1e4cd8fa063e4614ca56573b6060d2a71300cda459a862bf794c556391bfa5308a34c4cf040f7ffb189ebdb30ffb8a09df290abc2bec73fb83856b3ac9b173d3a1c6f1be845d7f069a6987b67af0cee91a0c801745f597ff2d4172c6d3d99bb5590e390c57a6149044f2356048694ff570020cfd40fca060c8e762b12cc7486cf0e526f5e770c61b28b8cbcec240c3025f1d1390012a9d4a4ab17f70b36a8ec942b84a62e44b2a87016e58e0dccd8fb79da67fb947a9e20b235f5e784f41761d96629dacf13fa0bd07d5c7a59876cd2588ceff37f41276fe3bb8cdef2a21e59a0496353a1bbb28e7d6c56393ee2eda61e4d06827f92f2351a1df25a7682fccd85ba453dbe03c5705e97cfc0ccd22f3b05fcd503d16a977e3e2964fcc363350ea2f1032613f8b84b155f8f69bd903fb583376c75bcae46a680128ad7d267b1bdb68e1b5616883ccc48dc4f34a7fab9219c1fa4073196f434d85b6e9b7345e8d77e44e38ff33a4298f0af7f872607b7a171b228515b38f4dc297a05ded0285b29fc272c41beac57eba47caa2defd224235cb835bb4975a2e05725c3e85b0142ac72673bc2a2a106d7c779a26ea0710e6d48e0c65b677c9fc6b4fde17f3f01b4a8f122d8062fcb5393b76695ca4d8053944a78c9eeceb4e1b424463e9696e944d87c8f03a5c19bdbf8022e028ff49ff1245468e35d0da6b99269e67950abb3480d198ab5b68a8e4355e5732885869a3ecd8c71afd4923ed137af413be33097fe420347155f8074428f0511c00f51870215684101444774bae2db367b44dc0e25080e9c60de171a3b4a8160b4a9814bac684e7ceb390238f3be85ecad24115191ab06699f547b25f840ea3dcf249180606a177b1f291a89663a3db605a893106ab044be0f28925328b666055546ce98d8f91c9cc2eef075dc10140b3046c8f70f5e3fcbc42e0111660c96ffa13b9767ffe44d4a78b011fc20f9abde961fac3a2c53fe2c818bc5c8c5a415d843e5f5d4011ba911e2bc15f9c150123d81a886b20722929cd82855db16943fb0f32acaa3196ada5dc803c86b7070931a150dc6ad8c855fe91f1191c04f39a94f74772d84beb1d771765a3128bef58bdb6abd89adfc1833b64c7ee88c3ab1b50bbb856a9d6a56def33a9490b7d4364a81e0b2a17fd0b25ecba4a2fffa03384f217fba27b9a43355052ee061095f555873bb3b2c8e19321283ba993cc7a9424645ad69f6308c9797eb7d70bf0294366a5f3a9287d68f135b1aa13321d2c47b99bd2fc348c2d5edf7b123bbc6e8f9b8c8e0ed27be70569f7727f2e9773d3214ec633fd83182289b6dd3c305b4f5563e67f58b1471804f6e3930ca6bea549511a92b65bc1753ebae06268ddcc4ca94ff2e1ba7241e40fe0d32d56391587dd565ccbc6b717aaad563dad858119e08bb7dba03995e2c0d4f9bd206106aa4cf4337ea3588c58ec51ad5661634769e3186f4279aceb388e22dafd4bf87a61584bc666c1195a83ddd3236810da51b23da405f07f392427ebf65e6d5d298fc207cafd6644d11e55292a4351b4228b259b99c6d1ec8822b7d7fc6cdce0acbb97eb46f44d880f941d55b4ba5a3c2684cc81dff58938238edf1f4829feebd4b0de5018199483a5e9c1989ebf7546c6ef8a7ecb5afb21501fbc17ddae48a688f4ad602337b198d8a6e736ad8950c5260f5126afbc7f199874139d32d3f050d383e3bbd36407c371a2ca4e1ea56e94869e4f5509ec2d7aec3f8dc8214306c054f103ffd80faf4736275cce73a1a9a05b45417348df9710cf324688a09152faef659330415426d5b3f20c61bf19cd64ab62266d5c8ff168045250fbb291901e7920a3f63e5accc7b80b48799fdd6c1c77bad9fd6d4dea3fdca2c6a44ffd4d35925fae64a6e700ffb1e5cf5981a3034ade6516790ed32f0894ad882df17f41e2a53ca7298e345bc834fafb02c21ae3f3454fcd22db9eb10433e82ffc1638f5bf03150d902dfa4545f07a37b6c4b61832941ebb5b937cc2b28fcf00bea3c4ac3090f6ef2bb14f4c131cf39b575a12fe9b948f04425679beed4c8a6fc8c9cfb18b6fbadbccbbd421daef38d81c67ac52a727df740cfe3a09fa6c991f323f545718a8b9bb7b9cc288ff7720ccbb2701be18fc1160929a649dbd1ab10f61376b1428cef2b8159497a6ca0e534b6912576e8f2a4bb4e99327d37f87fb0a1058a2acda0b6a0870bf7621a7c4c6c88eb593f3f8fc456c4c45303b873af9f05759730ac2558c41b754ca18b0f6f44d74fa8caad2b7ac40391c81883a9594a6a3523fc4645189b10bad8d778795ec9adada48e1a5290e1fc098d0ad07b36d881eddc066dc6ea7a719e94160cb5eb7c602207f48cf10b552b1961d7a7e6a17652e14321442c256258559fac093d0e4f92b02f578cebcb69188f1823cd536d4ca98c337f3aa562b7b4b36a301ce8169e02382230bd7103c3bbbc1440c4468cf57214565972657052f8c2693beaee42d32bef2b59a1d08333787d598e3d81f3337aa696fa7460ca97283ca4cfd766401e7bdea88303a38201968d114b03e3f21f17d3c02a741130e07884d9beb4522514a29b6c63733785abf115decf10de7528eead2bb5448e9ff44445cf47872ae96c864f90313660897008996ebdae8e33d7cee054d879a374adc818e43573c2da1f565bc20a370c777f60e9a9ef67bd9e5e84c6b6a675bc5cd045e1a65986512fbe628fb4adcdd9648a51566d3813d6d255b15006eb4da", @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="244d56e9e8a735b7b166f75b78e20eec1dcd69b60689fcbea0861bd85e982b441261c309e8454d7ee4ecd5829ee62b13f75ee9d722ab00cbbb8b92bc670b3cd611ecc8fd89394901d3cab18c9b14a0f414ecd43cf2ef9f77183d58298faacf20871a06c3579657df42848a7d0ddfdfec34d65cd4e5ec682eb40db6ec90d4505a4a92dfa9fab29224bdf700cf0d2be259c1ac94203cb6e93c2ea68f4574ddb2e5ec3370a962c2df3837b24e0869fbafdbcfe8b584bc46bb42a2749de05f6263a03219498f56edd35f0353409b060c326ad7fff9e07f837731bb9956a2aa406c866ff8367a21d1b2bf0adcc327967ccd7b59e47dc1cf109742dc33", @generic="e9022d2a2478f06a54ffdd584fb44c198499e0a23e37984ab306ec7db38777a448f3c43ecf63863085f31424ce9a4deca05a826a98bbbdc97c1632780feecbfb6ca2e1a580506c13f7e2d595544fc9b0126267515c226cfe57bbb3e2f74dd4977325dc30cfad194837586fce3a83bec1b601d45013409981057a8511007640172be71324bbacf4b8be0c9c66", @typed={0x4, 0x88}, @nested={0x8c, 0x11, 0x0, 0x1, [@typed={0x23, 0x93, 0x0, 0x0, @binary="488bf7f113720caf684d6218ee2e1cc9cfb0e6ecccab559e91664094a8cba3"}, @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="25366c867b8d5dcddc0792e37fc5167711d96812d0c21d77dca49b786c93ceaed74ac63d8d0a46647c5419a438ac5dfa5b7bec08b92b49ee92c7e15dd15ed887d51c5c23802152d881099f44116ce9b6e41ef52e06000ce21ce57208"]}, @typed={0x4, 0x102d}, @nested={0x20, 0x1d, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @pid}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x10000}, @typed={0x8, 0x66, 0x0, 0x0, @u32}]}, @generic="a13a206535ca17f1ed0051d86289f676db696b1935cb3295346b175f8827dfb90519d2ff6bcc61465987f9175244e312290a9b56a4cc74b85076c3d93e487de176cb62e23a6fee754847b953a0d21ff5435eac5c5e88436d869b950c283647b76464cb955d236fdba56a3f46e8355d04e1ca3241c700e6b71966461e18575549bd5a85a8312e91188c70ba211daf79b5501407d2ba4c55f5c8be5b760c367ab2e802676efea02ca7c135246bfc93fa5aa8ca1483666dcd8e66d4a0f02b864e0485d955c44c015cebf12a938557b0e594455f3cbe6f5b5a78f927640b3cfc91ef64a860394cfb4218404c1a66647016b83f097c7c9294406a4a0be5e1a591"]}, 0x149c}, {&(0x7f00000038c0)=ANY=[@ANYBLOB="941100002d0020002dbd7000fedbdf2557a858079713a32365426cf725080f9dda744afcbe1453dbe8c106472036289200bb748b88e539e0fd3e9f9c2d04d0597407e965acfbc255536d68c55ff7b33774efa2e0026409a1a296d0e34659aebfcb7f0b9bc6de248e947155e1bcfc79f3b2b6177a3d728daf506e2c7f37f79c69798d1ac4a465601019edce9a1bf6279b74cebc3af917d9b7e7b61b9e01e1065768f8f247e7826234fda76c4aa2b08aa97d8c57c0b51cd1aa15836089068b941773df34b11655a333293efa75b6c023fe010a5c160780a8c59636a18c1f5560572b6133a09796e639f9f9ee854e2b94b15f9bb6743be8fbbfba83ec57d14dc0613bd4bd51bf60673e8a104880493798f68bfb969aa24f9d0697823297fe536e85c7bacdce610dc623cf85cbffd440e6a6a1cb861f8a24f986bcf0fe47b0340aae783e9403279bcf3ef1bfa9d2015799fc142db5f65f3b3b601e50aabad57637d021002abdaf9c4c7380bf374b6ce11f651da5e7b638f4e507144956838b338de951888fb6a960adc3fe4bb3fc083aecad1963b9c0ed905f54d4f8d256ffa780b36ec310ed63556546d2edc51b62238ceda17ae6ddc94e847bbdea458c3d77cf8317c92edab5d2c4e619c0a50ec5c9a3c55e5546ee732b07d42bd0bc57b20ccf3e043ca26c1c3f0758c7c62a02604858cc0ba4f58ce8e0f7f6dfaf4aab8132920ed5804ba935c5098302a1bc9cb0e60a3a5b5627162687d5193db08bfbc3a386dc4122524c5b7ecff7c131c05b9738922c92b34667d0ce2dd91694baa02d1e3de41a4dd0a04b1760403e8af28b83701820dce4f5e6f80aa06b4a90d8dbddc5283c966379b19344e493311a79e0ece07e779e6334b8c7a9b152e81a5a35636c22e3b8abea4df509330a8135fb4ddfab2fd66f1c7807cfbde20b716c6ee68f282be4ae310737053519a904fd410086cc7e20e54396c8c39ab35964b121550593f333bc03251252f860e240471a8213cfc799c5c7772d7402c0caaf057ed386f5ad11ad6e2d5fa6da6ab32b29b3de4b23e1096953a249fa8df750c9e58726bb58416dfe465fc0bfb972e9e3aa8cc9b210402f996aa074358c86bea0d44cd21f106f11c6f06e9bf65b39eb6ee0e3b439be193d9d65215457b894d7786af7569138c5b281f20a72c8046fc470fdcdb4991ca38c10aefe2f3b018b9b293a4aad0f6fc8e96e9d4630bab55c5fccb2ce24b1d5720530a6008725308e1c2c27a575768783ce14a5fbb6ea5ea705c06ee1140332ce30a9dc7a6f19f5dd74f128d7c6d4fe3553d0f5d86806176e16161fe4ac7b924fc7b3ec22c6e1d736704300126fb57c2bba5b4562e7737e6f299035d32180c3438f802f84e4499d654101a665c06aca08bb7fccdcc184f78ef357985607623c9f0ebf706d7913a3e3a59fd84217980b117169bd279b1b508c9ed07c544b36a8bb97d344194d86db1b9575d04c07b090da8eb314288bb9c2c9fd8e23ec1601f9c642d5ac092e400421028e343f39fb273144447191f111af6aa0a7b66e34f9fd5404b9d9bad19cca64b81d3c0872aa25048384065834f445858e3de5d6fa931aaa244095b36db88fcf990f58ad92c837b1b42782f25c05f5284f4ded833dad09b315815b0ccc851838bd997b0e0f324017e87d7a7cc68779361bfee3b35a37ec1f1238c5dbd073a683b9a7effac271a3cfe52a2d9eb60ac56b688abce0ff5034f3ca1e8ffe299024d15843ea6b368ea3a6fc3b6a7d7aed7da8e776fdf3446b99a177d8f7d4ac7f6603ff60c57fe62f8e204d40c6a872af2c4ce8a2e1d8c9e4162bf6b5ff86eb35cfaaf150f2d25adf29dc779bf8566b46e6bd5bdd905260d67829a0562a429c8d798c79030df6720bae0b74b1020cb009abb74c2c42138a5ddc319b98e7bb8b7e080034852edd298c3a6b524b199a7a8a0eb44762a906bb83ea559eee257b8dc07a0426628ab8f50b032b7014ae31aac8f17a3e7af30de650e2754f1a48d74a149acca0b94543147672bb34088ccdd5d0f5dda8bb6730a82bd6cd27977ca9b8c812155f554891c3caffd68daf7ef69686cf05506c7614ab97e4a8ff8c2bb5c4e798e1989030315786d30208701946e887382a91c725ff6e695dd34fd9b5da966fcaf1990f4dc3c843a1ed716db060dac3ee7d191e4572fb797f55d43a638c894ae69c8fe8b5518e4510d1873c17e7f96aa5f83a262314521d22b95ca720dda009ab28bf014250bd2bdf34a86d32ebc6941b6de4125a1459aeabbdcae51e7c1f53ed5057246f5aab966e4e9a58bf82d7dc0ba7d1b0da7913d147d23f9764662055a5a42918afb1b64b5d7908b316b134508a7892494fa0b9efd145001d1ddd72aee9f40973b92c080e8227b9c1ab3ae8f97e3a735628793d12ca77750ec25d69a034adfae5c3d9dace3059512eefb09efd4da152452c4224dd7423162363ebae25566815a81908dce34998d0827e87bbb90fe82f85136edf603ae984637ce6cc00c0f6c40dd53431af804650ca567c620fa6e6ef7cc3a8fbb562b325374981d38146a724091807e49e48658001d919974fb64e274cc9b4a1c239daef173a40781e3bfe3c25915aa3f5c31ff4c7249aca1db1929fbcf587bc56cc570ca041de6b2c971acdaa914144e7cff9fd918d912b4b9fd5f339fd383ec2c265039adfaab8a686fdf8c38234583dadbe6d38eed0ac07120181ba6a10872f75fdcf32f5b33eaddc037c9f40c1ac68fb45f70329cde71d6635204c864489e4401dbfa07c36b9f0fab2c0a2335106787e1dc28fa83ce878547c10a4eb7e5cc523ce4777a97d7019017404dcfd214d2709e537c4540db3a0a094e308b60059be5898b21859c99b5585afa175c928e4521c6ff1103152b6c1dd68b12b3d7e5f077ca8ddcc730e447424053c380e8672fa8bf063a32ee007a38697139b1dc49fc84747f1acb79d0130304fde587d203a74c5424a095d23c8b048cdc56124ffc300c813f8aaa2ba0a950e4aa2ed80beca5d433ec5bc011ca159aab139121c8dbac33da334601d16dc11e82fbea88a8b7d4e9449a11b81d9145e9ec1231cd7d5527bf70a668d158ed9582fd203c40a283b67631e6a011ebb485a1bc015d7b49a705725c62a157f4921d46ebe5a8fa632daf833db767e235313c598cb639b1b47234d4abdb527f6c8918d1d7d94c055a2cab93e2b825e28decdfb9294bd537cb7111f6d090255a2c6bc9d94aa079c35be0fdbe612595e5341c21a8ff906c9ef063bafc9917db46e9af2eb6ed84d7504184c8f61ced7cc7c120c9216774b687b3264e71ea114c78edc055e0c9c3f2da3faa7e96117c970337257111860d5f2c65d81755d49a5c7ef292388a70dda9b9556af444618dd4e2604cab07bfec765957b732d1168760f3dd49ee800cebb521a012c0229bda50d7ab465935f107b885c2b4eb7288461dc5cf9f84f5cdbe7b5767aca159aebd18a27dfab8bebcf8ef94bc67e08be6fbeacdf89e8e075e86ba718f88140512257b8a7aa94c0aa61f858c8e4f59d5e36755529dbf999c2908ee6cf7485d10cb7f5a3f7a3cfa48f9e38ffd0ddd13fb70d5e7712668caafe0f33fe15281f0d65640d2c2389e423d3b5f68ee1bfa34ff8a5b2d6950c32bccc509b3a1bf57fb9cc8b2126f0561346677e7c39f361dd6f5ea945814aed2c0e061a53488ac85a6dcc566668d5427da5f2efa5f52dfdb9008213302339cfc7ddc1bad59e1baaaf9ee44f5ad619a6ea01f158381819f45e2bec23e5515d6a79efb6b736d5eb0876fe1e740ba4ef4578257f1469d816bac9734a1a695cab7be496e23e68f9a997a014f9738dbeff24aa411c223c0cb53a7a9229939674453275b9d58dbc0fb71623c247832cbfc981e39391aefb8734d2bcbfe4858375cf83bc7def690a82e3463389e70052f72f3e3a985be6ac65bb22f07cdb72440a31d0fbff76926242270c44355d220e7d335bc1a76b14e6e798868045d3907a8c75445e52e22d449cc0bbb8d62a6e24d629a8d1cb8830ebb7823e42c97682b217ee82e430c4fb3ed2dbbd1a1b9be0086d5f17e9bfa2c46ed0009be8c777ceab082f92df114ffa8cdbb43cd89f12db728464fce957d6c784c5a5565978306203c8710b9159d93ecd3c316584bffac3f062646afd8f660120b10850ef949f323c9a81f4a384c1bf410dd2bea32b8b138b9dce028dfdf7b8312e562a0cfe5d9f3a7de823ad514ef7bdd262647ec1ab07e1bc7810e2f0b79df3528a2a43352abe936a94676ae4614c01158961d4e67d8993fd2934161c8d6bf167ae32fd5b0d48dcaef0278e9673439b22e085388b68adfd6ceadd5be7ce058bae09a61503a41ccfee071c3b3790d6bbfee01ac6d1682b482137090509b3da860c81b559160da0c44eb22242945b1616bb2c07104f816c25aababe2773cffcfa0fafadfdd228f9571ad4ecc1e7ced6c383f920a84d2c84facf9213b5b3c646886d9a588cd144c5b1079197b9b6a772029fba250f26045188f41f8552f8d85678c19d0ed5e26840453a50917803aaba4aaa7a62bdbbea069b11ddfe9a967466b56f0b8bbf253ebc37c46c96df4eb7cd564cd805c9f14db7765424d3249eaa8610d7c7c0906ae591583e27f1ff99a8ee72de5a002962aa366282b00c8ceaf8cb2517cf52d51e00e6e63e790ecbf95af5649afe4e46f7cf9b07dcd39b68abb9b04f515d5b18611efe21439e5f9731758a1443c42d685d87d1dc9970eaafcde58b5ef0d09dd9aa57eba017a5f387f572be5c6a52b43f40175f97f38cecbb9e7a077cd2dd1c84ecc1c576577bb6bd9e06323f221cf4e25af537768b7596932cfcb4be5b0979657cdda7106f13f16597e10be34829532eb73f689bdbaf636241e6932984defdee86a86106ae7287e46db768777703b517f41728547fb82a70c270aea55239501bc8188a4a46622a348a960fcaa4bd10e99001426aace32ad101b0419bc155eeb6163b92fca2327ef9535180e860b52dfedd78c3413c4b7f8a2ed5f3bda82480669ac99f7b2e4994c994e6d0e47654914eaa3ad9f8d6727e60328b84b541060bc2b18c23bac50b4ca4960a19efff80edb6a37682b1b5db1cc468ffbb9a5381504fce68dd9e6e0862921b1a3b7001dbce111ae6a0e751a5835634eae8ca4cbc10146063250a9c50104c88f40e881b1b832ee1152a5d5815a7ec99bf326135d69d8ba392e048c831f7877744267da8b1cd2303b7b29f76d04bcda726c9487918fa1971671864fe826a3c5704b64efdf1f7be58fd4e558cee4c6ff2ce6122359e778413ef27d8017c8b536a1a8b839114211ef28b9c836aeeaf57b98565a1dd5970d630186eddc238b46f96b2b8d2337a0b962818db4c21b258834adc46a06db2ae0555553a614f122de8cb7410434e21282b20e47319ddec057fcf2ff8aee210ea05b55fa9e4839598bc1d6950f14b2154c39008d8fcc08efc9a5c0d5e3dc3241f973db34d497246460255c13ee28b531bf93d4147379f976a0cc97d9cec7d8ec5c7dd3ffe703a26c4843d1a2962d917b66b0ac4fd2359e347dfe890d0e12384c73cdf306687b87177c5eabb02d1c1cc081316b8d5a475308e7f59535e9768577eb3af61a8833c4f7ba2b9483d6e3c010e6cd7ced16b193ec3819ceef8433ab98f71c6d5cf2c7210db0e356925dcd8f23c7db7521143cce4d7808be0a5011925411dd3b1e7a6fdd06b8dfec9f5799243f151e213619830f0f0f4d8328e673596bcf229529dba491038013bb253bda323c9a21c7da9b91a7a82ef587919627d9e3df043ab2fb97c07218f16def99c6bf3fa7b06f7c955c8ae67996d5f05114639d76aff22057b2e3f8750ecddf5bef3f023fd1000f48a95f2d175d7497ee7070cb9b5c3ddbd76813461fef39a6113400edc7001b637d5e3b887f710c1cf6a68e5da67f72e7ec32fa588dee9017fcf62113a6ab361e21c63d535dfc5a5555553121cd77bf356c3add7c3a99995c35f723669989a4f48fa28c0a6af8da2128a2b4c156ed0fcd86ebb2a8a4b75aa77135fbee77087f132284219fc74cd68cb5ab3767ee00f979bd975c46c4e45b15e4eb2e74844d586505d76489d12b4c7126f928d5c62b8fa78601b9b2d47f98f808b592c5414f078a82aa9967f2bcf9dd5885c1aa8dd914456ab36a5cdec0ae4fcaa769ebd2f7cdf14006d00fc0000000000000000000000000000010c003d00090000000000000008008a005fc5000008006400d78dff8b018866526fe3bcb235f5903c73245c1df5cb3192206ae27979ab9bc9aa01348e21798131387d06ca3023b70ea6e151ffbc821bca721ec015d80902b15d19afc542b63ff1d1571ad35bfca9a30fcce6f97fc181f9465e06d5bc460e8725dd65efb18f87fb7a19af2a894413f5c7a4e12e448be1f94e36a23446a03250291343db7c4f4d7fc0461db6a43515fbcc552f8aa44f24baca1da6402dc5ce4423b053", @ANYRES32=0x0, @ANYBLOB="debb873a892027a97f5f97199b33243d5ef857b57e37417977ae6bb045ae4b31e0ddac6b90a6b06b37fe9a1d8a4e15cf26f54fd4079a831ef8efe0ca5a308ccee1b240105790a7003c7876cd8f8afb05bfca00a356610000"], 0x1194}, {&(0x7f00000006c0)={0x1f8, 0x10, 0x1, 0x70bd25, 0x25dfdbff, "", [@generic="f4482fcd688a2ff02ce34274c63d28da0389fdf54b70b7038b7c37d4e475cf042297b11d13965662ca3545d5869042", @generic="186b5a7e4254dd738b7a4ddedd71f9555df7118e977ffe1d1e556fbdbbe1fb85a03df18c44e1b622b784352a21493c4ce6622c52a5cef90e61a1f5c8e17955ed9f39381991af581490abd68799cdb2b40d339af53b90ecccfe1f8d21048e065dc00b46f2a80af3e2e8812ac150c55d0df4eb61b4", @generic="8c8cb28dad163030de9506e56f88d0672a2bb7b35158e9933f922275bbc9eee626e7b2ffda04c7f0b49556b58ffa3d957b7453e059e23c20108687281afd2035d89bc5", @nested={0xfd, 0x29, 0x0, 0x1, [@generic="f6698a295aa93978af27f07b3c3a66a20b2f08b59172e9e62ae0d1c891a5fb2362b520fac59cdcb196d072ec024dc4fbf0302cf75818282cec6b3fd8918a5bc896b680613ef5dce43c7508dba3acfe1cd1a92b1e6c56fc630ca714735d10636aaa983595d3ffd3c5ceefb75808b9798bdfd6c4ef0d9a8514f1feed3427d8f6cedbfd89ea124d1ed338b8da8b5dc908aae97fea423f75c99cf4acb6da4ffed7fd402a26566afc298f58ec7afbcbb97cd8ee05ecfa06c541684528a4e466d0220ca656c2f76334a6724ded044f9d5c56f617d85736acbd48429378fa153c1df4b8cea25a2dcb9a4b405b9d760f007d7b5eb4c5da1257349e3999"]}]}, 0x1f8}, {&(0x7f0000003380)={0x1c, 0x1f, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64=0x140000000000000}]}, 0x1c}], 0x6, &(0x7f0000003740)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9d305b4b1c000300000000000000c10800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x14}, 0x40) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,loose,msize=0x000000000000003f,aname=-],access=', @ANYRESDEC=r5, @ANYBLOB="2c6e6f6465766d61702c63616368653d66736319f768000018000000000073666c6f6f723d2c666f776e65723c", @ANYRESDEC=r8, @ANYBLOB="2c61756469742c6673757569643d64648930333803302d333600632d626263622d663761622d31373033360134002c636f6e746578743d726f6f742c00"]) 13:00:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000012000280080005"], 0x3c}}, 0x0) 13:00:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="005ca1e5880d7318447cfb1f46041ff0f3c5d8085796ce39f29c4ce5318757640000475f26d5543ec18424773fba69c6a2864b22c294347ab55a2e0b44e387f5356cfa199f55dbd3e11e3f633be4ddc6234a7dc860d8e7784d3db30ec9"], 0x1) 13:00:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e001318000280080005"], 0x3c}}, 0x0) 13:00:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000020000280080005"], 0x3c}}, 0x0) 13:00:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:56 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101040, 0x8) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b60, 0x0) 13:00:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000040000280080005"], 0x3c}}, 0x0) 13:00:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:56 executing program 4: ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 13:00:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000002000280080005"], 0x3c}}, 0x0) 13:00:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000003000280080005"], 0x3c}}, 0x0) [ 1271.215065][T17065] __nla_validate_parse: 18 callbacks suppressed [ 1271.215073][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1271.279702][T17067] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000005000280080005"], 0x3c}}, 0x0) 13:00:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1271.309035][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1271.310884][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 13:00:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000006000280080005"], 0x3c}}, 0x0) 13:00:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1271.373840][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1271.407414][T25348] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1271.432198][T17078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1271.469491][T17078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1271.479360][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1271.553945][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1271.573663][T17086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1271.649528][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1271.767737][T25348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1271.767756][T25348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1271.767771][T25348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1271.767785][T25348] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1271.767801][T25348] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1271.767828][T25348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1271.767841][T25348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.787828][T17055] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1271.808087][T25348] hub 5-1:1.0: bad descriptor, ignoring hub [ 1271.808151][T25348] hub: probe of 5-1:1.0 failed with error -5 [ 1272.010380][T17055] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1272.266648][T25348] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1272.320473][T25348] usb 5-1: USB disconnect, device number 14 [ 1272.334641][T25348] usblp0: removed [ 1273.027242][T24876] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1273.267280][T24876] usb 5-1: Using ep0 maxpacket: 8 [ 1273.407629][T24876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1273.407646][T24876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1273.407661][T24876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.407685][T24876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1273.407702][T24876] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1273.407729][T24876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1273.407742][T24876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:00:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:00:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000007000280080005"], 0x3c}}, 0x0) 13:00:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xf381, 0xffe1, 0x4, 0x5, 0x81, "080097f600000200"}) ioctl$PIO_FONT(r0, 0x4b60, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$CHAR_RAW_PG(r4, 0x1269, &(0x7f0000000700)={0x8000, 0xfffffffa, 0xd6, &(0x7f0000000600)="ece471ee5319252ee6e8c70c0453dffea0c53167e60c99d5f7c9935c9749c7b6e13154aec72167e4a34763c6ee0ec8dfb3441871d4df844173d9e858d96a0ed6239c0a15c43a12d5dc2f8f861d8c0db76fa5d9e17bfc7e767ea644eb2b7dd08b24e4e9ccb507ffac420f79989914ae443bbdb88322f3fde0c2bc8136365aa7efb2c5c2388da8adbf9ad3c2fc2a62a6b70b2d9dbf0bf0b3a6349089de60c3d50eab1516d72917956b486bb836c01363f2cd2cc599288c6040c11e9440e8f963f2f7538eed9cc283a49b965854abbc7930d340385a5982"}) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x5, &(0x7f00000004c0)=[{&(0x7f00000001c0)="ab36de54d9c782aac3fb0df26c498d9dc5af6399aec89c74bae2b8d88a8bb3093e9ad08d1c4a1440395705f6d2911b36400fbce7dbb37a670c5792f3acb9c861e1a600bd20e36ccd0ead2f1638e304d8d771aa5cc743032242cec690d38330e179451dd930bffcb1f29ae71b5c17bdcd4e28b35e03a9ee39cb5eb6f685455f336553742a61200483004649923ba3ff2a8acc78c17259", 0x96, 0x829}, {&(0x7f0000000280)="906c6d1bae39144eea78a6fb1e19f8f746aad92ef5b337e7911292d237bf4d28e1034e59ec479ece160f9ae6b98f3a2251aafaaba56d5db0f143d422716c92138a7997e17cd7f50702b6fb881557dd973a171bc6c30c328e57d1f7d5195cbc15bb9b6498ab6f974739cf45a1f5e75559ceea9807113956afdda411bc4104ef", 0x7f, 0x40}, {&(0x7f0000000300)="6affc36887943e7cf7ded4e9f1d04dd699820a90396ccdbf25010a1e79de14af605d4bfbf2e22bd58cccce6511b4049242623e0226ea70c878ade0119ff4d150019617e054c0be66ebd3a2286b678db560dd23ca335dbc093f3ae76adf34ff3f4c58df003a9d2edef9da6e28f1e64dbfb479eb7c81846713f64a653945e35d9ea9ba0a7b159c5b113f8d7de8aff292983dd5437e2204af75dfd8c3ac6618", 0x9e, 0xffffffffe31ab6e5}, {&(0x7f00000003c0)="e44db4c02fef5e87fbba18960ca88255ec95f0b6687be863d5a33cf3444a67808250eca9084dff36193e3f5e8d7a73da05d7fb0e647c2444f744dc9b964fea55cda3c400be475df35cf756c8f7bb2d94fb8693ea1d8d9b62f2332b38dd188c6edc5060ce1fa398e4c26d61d58aa30e33c45eb9d2b6e69b7719a9ad721bdf9ababd105a9fbb8e80d0f12e6dcf78d60b6b20a82c935ec88e5055aa4cb3883578db468ed93b68", 0xa5, 0xfffffffeffffffff}, {&(0x7f0000000480)="bb", 0x1, 0x6}], 0x2003820, &(0x7f0000000540)={[{@errors_remount='errors=remount-ro'}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_role={'subj_role'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, '+\x1c'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000100)=0x4) 13:00:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r2}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000080)) 13:00:59 executing program 4: ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) [ 1273.427802][T17110] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1273.448591][T24876] hub 5-1:1.0: bad descriptor, ignoring hub [ 1273.448657][T24876] hub: probe of 5-1:1.0 failed with error -5 [ 1273.673909][T24876] usblp: can't set desired altsetting 0 on interface 0 [ 1273.697673][T24876] usb 5-1: USB disconnect, device number 15 13:00:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000008000280080005"], 0x3c}}, 0x0) 13:00:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000009000280080005"], 0x3c}}, 0x0) 13:00:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:00:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000a000280080005"], 0x3c}}, 0x0) [ 1274.289558][T24876] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1274.547329][T24876] usb 5-1: Using ep0 maxpacket: 8 [ 1274.707762][T24876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1274.707780][T24876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1274.707801][T24876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1274.707842][T24876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1274.707857][T24876] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1274.707883][T24876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1274.707896][T24876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.728638][T17131] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1274.764014][T24876] hub 5-1:1.0: bad descriptor, ignoring hub [ 1274.764127][T24876] hub: probe of 5-1:1.0 failed with error -5 [ 1274.968510][T17131] raw-gadget gadget: fail, usb_ep_enable returned -22 13:01:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000b000280080005"], 0x3c}}, 0x0) 13:01:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="3449f914ebfe855618dcd53de4fa982cf06f98f15c07100ac86f5ace7d4fd6de4037b851b2d9c9bec3546818073ab777d074ec824c1a8171e5e03763c164760c64bbef8c13a29025eee449c386336cf8b4837b6c695f1e994a531e28223da264936fbf8b5458982acccf79e2be752fb1e663e1c376a67969765be55aa0ce65ad2e0f2bb99a13db79b222", &(0x7f00000000c0)=""/216}, 0x20) ioctl$PIO_FONT(r0, 0x4b60, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x2c04, 0xe5, 0x4, 0x7c24, 0x3, 0x3}) 13:01:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x220402) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) 13:01:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) [ 1275.207942][T24876] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1275.237876][T24876] usb 5-1: USB disconnect, device number 16 [ 1275.239893][T24876] usblp0: removed 13:01:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000c000280080005"], 0x3c}}, 0x0) 13:01:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b60, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x1, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000840)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_tables_names\x00') ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x7, 0x3f, 0x7, 0x5, 0x8, 0x7}) 13:01:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0xb983, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="d4dbc0d386975e29", 0x8, 0x1}, {&(0x7f00000000c0)="e90b85e23a385ce93cfc53298a9ac54a343bea8ed824c62203cc4542ab75980be5a89adfd18e540f949fe6775daef053281d01901c45d3ea3f48cdea0ca93f543b363ae24bd93fa51d22ecd87714a427b95fc8d77efe1c03d189672af8da16d7ae6351ff95b2f5e50c785c9bff5949a8fab17c9c7fd3041413572c6c25626e6d7217829d3dce30910ee0e666753a7bf759d0f4e89250574db3223b0caf77a93c8474468874db43962a8c8048f01d7f298ceb08dd4ca6", 0xb6, 0x4}, {&(0x7f0000000180)="a82b80b716f8c87f5f0b2db2c507a325fa2e6a6804cbe6d31fd689b4abe4ad01a4e575c7c82a7a341c67a9d5d912ab2ac59897db32dc7a4c3d24ce", 0x3b, 0xd6a}, {&(0x7f00000001c0)="66a9c6ec8252670e02b99a28e6160b08f2f8764f9f688ab312fe9bcc367c114eb41c27b96119c4159ce180e23cab65e42aa7bb77e52f4e6c7eaaa6da36b6876ab0f8408be5fc31f9871dcb4a9c8e013cf9e38d2858027951daf71abd9a304a8f8d094e347ea2ebf14ba53980776ac3cd602e92965f70fe189e4c5c48c668b75991eca52c2834d312c5b6e4244a84c221229bcfaf62ab87687a2b94ad7498ce312883d723e45461eb288c87d89bba940997b30b531662c008e4d4f8d5289988af08faee5f9985c1409d9773a74826770e47dd45f77aef12a53ef6c6d9a8371a74aca5e6bb0a88b089d63170aa19293c2d5a8d7c5c51393897", 0xf8, 0x8001}], 0x2000000, 0x0) 13:01:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000d000280080005"], 0x3c}}, 0x0) 13:01:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000e000280080005"], 0x3c}}, 0x0) [ 1276.167411][ T8997] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1276.407515][ T8997] usb 5-1: Using ep0 maxpacket: 8 [ 1276.537370][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1276.537389][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000010000280080005"], 0x3c}}, 0x0) 13:01:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:01:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x3f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x4}}]}, 0x8c}}, 0x8000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r4, 0x4b6b, &(0x7f0000000000)) 13:01:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) [ 1276.697623][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1276.697639][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.697650][ T8997] usb 5-1: Product: syz [ 1276.697661][ T8997] usb 5-1: Manufacturer: syz [ 1276.697671][ T8997] usb 5-1: SerialNumber: syz [ 1276.699412][ T8997] usb 5-1: config 0 descriptor?? [ 1276.939737][T24876] usb 5-1: USB disconnect, device number 17 [ 1277.643675][T17256] __nla_validate_parse: 18 callbacks suppressed [ 1277.643683][T17256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000011000280080005"], 0x3c}}, 0x0) 13:01:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000012000280080005"], 0x3c}}, 0x0) [ 1277.686176][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1277.757032][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1277.795730][T17277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000001100280080005"], 0x3c}}, 0x0) 13:01:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1277.840690][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_FONT(r0, 0x4b60, 0x0) [ 1277.932071][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1277.939084][T17293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1277.972035][T25348] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1278.217328][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1278.337687][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1278.337706][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000018130280080005"], 0x3c}}, 0x0) 13:01:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xd0d1a1056b6394f, &(0x7f0000000000)=0xf4a, 0x4) ioctl$PIO_FONT(r0, 0x4b60, 0x0) 13:01:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000440)={0x5, [0x101, 0x9, 0x7f, 0x81, 0x8001]}, &(0x7f0000000480)=0xe) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000004c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x20000c, 0x17, 0x2a}) 13:01:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) [ 1278.501487][T25348] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1278.501503][T25348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.501515][T25348] usb 5-1: Product: syz [ 1278.501526][T25348] usb 5-1: Manufacturer: syz [ 1278.501536][T25348] usb 5-1: SerialNumber: syz [ 1278.503877][T25348] usb 5-1: config 0 descriptor?? [ 1278.751412][T25348] usb 5-1: USB disconnect, device number 18 13:01:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000000d20280080005"], 0x3c}}, 0x0) 13:01:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000000da0280080005"], 0x3c}}, 0x0) [ 1279.482628][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1279.486955][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1279.560714][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004020280080005"], 0x3c}}, 0x0) 13:01:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1279.787497][ T8997] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1280.027283][ T8997] usb 5-1: Using ep0 maxpacket: 8 [ 1280.147661][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1280.147679][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1280.307719][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1280.307734][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.307745][ T8997] usb 5-1: Product: syz [ 1280.307758][ T8997] usb 5-1: Manufacturer: syz 13:01:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004030280080005"], 0x3c}}, 0x0) 13:01:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:06 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000640)=""/151, 0x97}], 0x2) 13:01:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xa) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) dup2(r1, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r6, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x635d}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) linkat(r8, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x7fff, 0x0, [], {0x0, @reserved}}) [ 1280.307768][ T8997] usb 5-1: SerialNumber: syz [ 1280.309204][ T8997] usb 5-1: config 0 descriptor?? [ 1280.564416][ T8997] usb 5-1: USB disconnect, device number 19 13:01:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004040280080005"], 0x3c}}, 0x0) 13:01:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004050280080005"], 0x3c}}, 0x0) 13:01:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004060280080005"], 0x3c}}, 0x0) 13:01:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004070280080005"], 0x3c}}, 0x0) [ 1281.437427][ T8997] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1281.677363][ T8997] usb 5-1: Using ep0 maxpacket: 8 [ 1281.797666][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1281.797685][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1281.957691][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1281.957707][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.957718][ T8997] usb 5-1: Product: syz [ 1281.957729][ T8997] usb 5-1: Manufacturer: syz 13:01:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:08 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 13:01:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004080280080005"], 0x3c}}, 0x0) 13:01:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ioctl$PIO_FONT(r0, 0x4b6b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0x7) [ 1281.957740][ T8997] usb 5-1: SerialNumber: syz [ 1281.959188][ T8997] usb 5-1: config 0 descriptor?? [ 1282.217723][T25348] usb 5-1: USB disconnect, device number 20 [ 1282.708576][T17452] __nla_validate_parse: 13 callbacks suppressed [ 1282.708585][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:01:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004090280080005"], 0x3c}}, 0x0) [ 1282.733184][T17456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:01:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:01:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040a0280080005"], 0x3c}}, 0x0) 13:01:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040b0280080005"], 0x3c}}, 0x0) [ 1282.852568][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1282.945541][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1282.954653][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1283.031135][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1284.245456][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040c0280080005"], 0x3c}}, 0x0) 13:01:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b6b, &(0x7f0000000000)) 13:01:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=""/4096, 0x1000) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x52) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000001700)=0x7a, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2) readlink(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)=""/137, 0x89) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x8, 0x9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x72c9d569, [], 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x40) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@dev={0xfe, 0x80, [], 0x42}}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000001740)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) socket(0x10, 0x80002, 0x0) 13:01:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) [ 1285.865852][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040d0280080005"], 0x3c}}, 0x0) 13:01:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040e0280080005"], 0x3c}}, 0x0) 13:01:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=""/4096, 0x1000) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x52) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000001700)=0x7a, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2) readlink(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)=""/137, 0x89) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x8, 0x9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x72c9d569, [], 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x40) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@dev={0xfe, 0x80, [], 0x42}}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000001740)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) socket(0x10, 0x80002, 0x0) [ 1285.903160][T17511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1286.049898][T17524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040f0280080005"], 0x3c}}, 0x0) [ 1286.157295][T25348] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1286.397421][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1286.517717][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1286.517735][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004100280080005"], 0x3c}}, 0x0) 13:01:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='./file0\x00') readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=""/4096, 0x1000) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x52) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000001700)=0x7a, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2) readlink(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)=""/137, 0x89) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x8, 0x9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x72c9d569, [], 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x40) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@dev={0xfe, 0x80, [], 0x42}}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000001740)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) socket(0x10, 0x80002, 0x0) 13:01:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:13 executing program 3: ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000180)={0x8, {0x7, 0x10000, 0x8, 0x99}}) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket(0x22, 0x0, 0x10000) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000a80)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y'], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0]) ptrace$setopts(0x4206, r0, 0x0, 0x10000d) 13:01:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004110280080005"], 0x3c}}, 0x0) 13:01:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:13 executing program 1: [ 1286.677733][T25348] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1286.677750][T25348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.677762][T25348] usb 5-1: Product: syz [ 1286.677774][T25348] usb 5-1: Manufacturer: syz [ 1286.677784][T25348] usb 5-1: SerialNumber: syz [ 1286.679277][T25348] usb 5-1: config 0 descriptor?? [ 1286.931088][T25348] usb 5-1: USB disconnect, device number 21 13:01:13 executing program 1: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x12000005f) 13:01:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004120280080005"], 0x3c}}, 0x0) [ 1287.726444][T17584] __nla_validate_parse: 8 callbacks suppressed [ 1287.726453][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1287.787258][T24876] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1287.852630][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1287.883128][T17598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1288.027285][T24876] usb 5-1: Using ep0 maxpacket: 8 [ 1288.167688][T24876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1288.167707][T24876] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1288.347552][T24876] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1288.347591][T24876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.347603][T24876] usb 5-1: Product: syz [ 1288.347614][T24876] usb 5-1: Manufacturer: syz [ 1288.347625][T24876] usb 5-1: SerialNumber: syz [ 1288.352448][T24876] usb 5-1: config 0 descriptor?? [ 1288.611160][T24876] usb 5-1: USB disconnect, device number 22 13:01:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004250280080005"], 0x3c}}, 0x0) 13:01:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:14 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000040)={0x0, 0x8, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) [ 1289.159259][T17620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1289.192436][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1289.437380][T17287] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1289.677293][T17287] usb 5-1: Using ep0 maxpacket: 8 [ 1289.797613][T17287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1289.797623][T17287] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1289.957407][T17287] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1289.957424][T17287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.957435][T17287] usb 5-1: Product: syz [ 1289.957446][T17287] usb 5-1: Manufacturer: syz [ 1289.957456][T17287] usb 5-1: SerialNumber: syz [ 1289.959419][T17287] usb 5-1: config 0 descriptor?? 13:01:16 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf0, 0x61, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004320280080005"], 0x3c}}, 0x0) 13:01:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:16 executing program 1: r0 = perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x3e7, 0xf8, 0xff, 0x0, 0x0, 0x0, 0x91dd7106ca8fd32b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x3fffffff, 0x2, @perf_bp={&(0x7f0000000640), 0x8}, 0x200, 0x8, 0x40, 0x0, 0x2189dbe8, 0x7f, 0x6d47}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5280}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) gettid() socket$kcm(0x11, 0xb, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00090000000000800044e70015efffffff0000b276000040eed7464b27ced2f3fe00aaea1a629101fe55506907165eff"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x1c, 0x1, 0x4, 0x0}, 0xffffffffffffff49) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000844) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') gettid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0xb, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x1}, 0x26, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e0005000300000000000300f88000f01700d00000000000000000", 0x2e}], 0x1, 0x0, 0x30}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:01:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004600280080005"], 0x3c}}, 0x0) 13:01:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:16 executing program 1: r0 = perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x3e7, 0xf8, 0xff, 0x0, 0x0, 0x0, 0x91dd7106ca8fd32b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x3fffffff, 0x2, @perf_bp={&(0x7f0000000640), 0x8}, 0x200, 0x8, 0x40, 0x0, 0x2189dbe8, 0x7f, 0x6d47}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5280}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) gettid() socket$kcm(0x11, 0xb, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00090000000000800044e70015efffffff0000b276000040eed7464b27ced2f3fe00aaea1a629101fe55506907165eff"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x1c, 0x1, 0x4, 0x0}, 0xffffffffffffff49) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000844) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') gettid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0xb, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x1}, 0x26, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e0005000300000000000300f88000f01700d00000000000000000", 0x2e}], 0x1, 0x0, 0x30}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004d10280080005"], 0x3c}}, 0x0) 13:01:16 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xf0, 0x61, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000580080005"], 0x3c}}, 0x0) [ 1290.204441][T24876] usb 5-1: USB disconnect, device number 23 [ 1290.758934][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1290.779098][T17650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1290.878005][T17651] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1290.879168][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.879412][T17651] bridge0: port 2(bridge_slave_1) entered forwarding state 13:01:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:16 executing program 1: r0 = perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x3e7, 0xf8, 0xff, 0x0, 0x0, 0x0, 0x91dd7106ca8fd32b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x3fffffff, 0x2, @perf_bp={&(0x7f0000000640), 0x8}, 0x200, 0x8, 0x40, 0x0, 0x2189dbe8, 0x7f, 0x6d47}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5280}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) gettid() socket$kcm(0x11, 0xb, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00090000000000800044e70015efffffff0000b276000040eed7464b27ced2f3fe00aaea1a629101fe55506907165eff"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x1c, 0x1, 0x4, 0x0}, 0xffffffffffffff49) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000844) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') gettid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0xb, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x1}, 0x26, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e0005000300000000000300f88000f01700d00000000000000000", 0x2e}], 0x1, 0x0, 0x30}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004003f80080005"], 0x3c}}, 0x0) [ 1290.880427][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.881012][T17651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.897764][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1291.009260][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1291.078674][ T8997] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1291.317330][ T8997] usb 5-1: Using ep0 maxpacket: 8 [ 1291.527856][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1291.527873][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1291.687355][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1291.687372][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.687383][ T8997] usb 5-1: Product: syz [ 1291.687393][ T8997] usb 5-1: Manufacturer: syz [ 1291.687403][ T8997] usb 5-1: SerialNumber: syz [ 1291.688755][ T8997] usb 5-1: config 0 descriptor?? [ 1291.837354][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1291.931310][ T9056] usb 5-1: USB disconnect, device number 24 13:01:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004004080080005"], 0x3c}}, 0x0) 13:01:17 executing program 1: r0 = perf_event_open(&(0x7f0000000800)={0x3, 0x70, 0x3e7, 0xf8, 0xff, 0x0, 0x0, 0x0, 0x91dd7106ca8fd32b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x3fffffff, 0x2, @perf_bp={&(0x7f0000000640), 0x8}, 0x200, 0x8, 0x40, 0x0, 0x2189dbe8, 0x7f, 0x6d47}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5280}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) gettid() socket$kcm(0x11, 0xb, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00090000000000800044e70015efffffff0000b276000040eed7464b27ced2f3fe00aaea1a629101fe55506907165eff"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={0xffffffffffffffff, 0x1c, 0x1, 0x4, 0x0}, 0xffffffffffffff49) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000844) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') gettid() perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0xb, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x1}, 0x26, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e0005000300000000000300f88000f01700d00000000000000000", 0x2e}], 0x1, 0x0, 0x30}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:01:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:17 executing program 1: 13:01:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000580080005"], 0x3c}}, 0x0) 13:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:18 executing program 1: [ 1292.867241][T25348] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1293.060813][T17742] __nla_validate_parse: 6 callbacks suppressed [ 1293.060824][T17742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1293.107514][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1293.227381][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1293.227399][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1293.387387][T25348] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1293.387403][T25348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.387414][T25348] usb 5-1: Product: syz [ 1293.387426][T25348] usb 5-1: Manufacturer: syz [ 1293.387438][T25348] usb 5-1: SerialNumber: syz [ 1293.393059][T25348] usb 5-1: config 0 descriptor?? 13:01:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:19 executing program 1: 13:01:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280040005"], 0x3c}}, 0x0) 13:01:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280050005"], 0x3c}}, 0x0) 13:01:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:19 executing program 1: 13:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280060005"], 0x3c}}, 0x0) [ 1293.633548][T24876] usb 5-1: USB disconnect, device number 25 [ 1294.183047][T17767] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1294.223319][T17770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1294.308224][T17783] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1294.487265][T17287] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1294.584596][T17789] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1294.613215][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1294.727354][T17287] usb 5-1: Using ep0 maxpacket: 8 [ 1294.847339][T17287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1294.847357][T17287] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1295.012403][T17287] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1295.012417][T17287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.012435][T17287] usb 5-1: Product: syz [ 1295.012451][T17287] usb 5-1: Manufacturer: syz [ 1295.012466][T17287] usb 5-1: SerialNumber: syz [ 1295.022892][T17287] usb 5-1: config 0 descriptor?? 13:01:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:21 executing program 1: 13:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280090005"], 0x3c}}, 0x0) 13:01:21 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:21 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:21 executing program 1: 13:01:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040002800a0005"], 0x3c}}, 0x0) 13:01:21 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) memfd_create(&(0x7f0000000080)='\x00', 0x0) [ 1295.264384][T24876] usb 5-1: USB disconnect, device number 26 [ 1295.823789][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1295.835024][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:21 executing program 3: exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) [ 1296.126742][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1296.136210][T24876] usb 5-1: new high-speed USB device number 27 using dummy_hcd 13:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040002800b0005"], 0x3c}}, 0x0) 13:01:21 executing program 1: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69991}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 1296.171569][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1296.244429][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1296.306685][T17854] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1296.320017][T17854] device ipvlan2 entered promiscuous mode [ 1296.404966][T24876] usb 5-1: Using ep0 maxpacket: 8 [ 1296.566311][T24876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1296.566329][T24876] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e0000040002800f0005"], 0x3c}}, 0x0) 13:01:22 executing program 3: exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:22 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r4, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:22 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) [ 1296.747339][T24876] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1296.747355][T24876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.747365][T24876] usb 5-1: Product: syz [ 1296.747375][T24876] usb 5-1: Manufacturer: syz [ 1296.747386][T24876] usb 5-1: SerialNumber: syz [ 1296.748791][T24876] usb 5-1: config 0 descriptor?? [ 1296.993187][T24876] usb 5-1: USB disconnect, device number 27 13:01:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800070000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:01:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd601f000000641100fe880000000000000000000000000001ff02000000000000000000000000000100000e22"], 0x0) 13:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280100005"], 0x3c}}, 0x0) 13:01:23 executing program 3: exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1297.536958][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1297.543885][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:23 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280110005"], 0x3c}}, 0x0) 13:01:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000008f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[{0xc, 0x1}], 0xc}}], 0x2, 0x0) 13:01:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 13:01:23 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280120005"], 0x3c}}, 0x0) [ 1297.827543][T24876] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1298.087246][T24876] usb 5-1: Using ep0 maxpacket: 8 [ 1298.227652][T24876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1298.227671][T24876] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:24 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800080000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:01:24 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xc63b9e35) 13:01:24 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 13:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280130005"], 0x3c}}, 0x0) [ 1298.397405][T24876] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1298.397421][T24876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.397431][T24876] usb 5-1: Product: syz [ 1298.397441][T24876] usb 5-1: Manufacturer: syz [ 1298.397450][T24876] usb 5-1: SerialNumber: syz [ 1298.398885][T24876] usb 5-1: config 0 descriptor?? [ 1298.643290][T17858] usb 5-1: USB disconnect, device number 28 13:01:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) [ 1299.331891][T17945] __nla_validate_parse: 5 callbacks suppressed [ 1299.331901][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008007, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 13:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080205"], 0x3c}}, 0x0) 13:01:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 13:01:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) [ 1299.383433][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1299.447831][ T8997] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1299.526083][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1299.543824][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1299.687361][ T8997] usb 5-1: Using ep0 maxpacket: 8 [ 1299.811906][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1299.811923][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:26 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 13:01:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080305"], 0x3c}}, 0x0) 13:01:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 1299.967366][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1299.967382][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.967392][ T8997] usb 5-1: Product: syz [ 1299.967402][ T8997] usb 5-1: Manufacturer: syz [ 1299.967411][ T8997] usb 5-1: SerialNumber: syz [ 1299.968844][ T8997] usb 5-1: config 0 descriptor?? [ 1300.210170][ T8997] usb 5-1: USB disconnect, device number 29 13:01:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) [ 1300.831248][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 13:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080405"], 0x3c}}, 0x0) 13:01:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x7, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:26 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 13:01:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) [ 1300.854002][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1300.968886][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1301.002608][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.017551][ T9056] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1301.287287][ T9056] usb 5-1: Using ep0 maxpacket: 8 [ 1301.427767][ T9056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1301.427785][ T9056] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1301.597997][ T9056] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1301.598013][ T9056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.598033][ T9056] usb 5-1: Product: syz [ 1301.598098][ T9056] usb 5-1: Manufacturer: syz [ 1301.598109][ T9056] usb 5-1: SerialNumber: syz [ 1301.599630][ T9056] usb 5-1: config 0 descriptor?? [ 1301.853551][ T9056] usb 5-1: USB disconnect, device number 30 13:01:27 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080505"], 0x3c}}, 0x0) 13:01:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:01:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 13:01:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) [ 1302.382723][T18041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080605"], 0x3c}}, 0x0) 13:01:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 13:01:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 13:01:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) [ 1302.433412][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1302.737382][ T8997] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1302.977320][ T8997] usb 5-1: Using ep0 maxpacket: 8 [ 1303.097735][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1303.097752][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1303.257793][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1303.257810][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.257821][ T8997] usb 5-1: Product: syz [ 1303.257832][ T8997] usb 5-1: Manufacturer: syz [ 1303.257843][ T8997] usb 5-1: SerialNumber: syz [ 1303.259250][ T8997] usb 5-1: config 0 descriptor?? [ 1303.511021][ T8997] usb 5-1: USB disconnect, device number 31 13:01:29 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080705"], 0x3c}}, 0x0) 13:01:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 13:01:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "8b5f2e3bc114288f17da468c0a80a1a0c65fb183d67ef88536d408d79018e33b"}) 13:01:29 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080805"], 0x3c}}, 0x0) 13:01:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:29 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffdb5}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000023000a0002"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 13:01:29 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) [ 1304.273896][T18118] bridge_slave_0: FDB only supports static addresses [ 1304.397327][ T9056] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1304.677255][ T9056] usb 5-1: Using ep0 maxpacket: 8 [ 1304.807647][ T9056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1304.807665][ T9056] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1304.967668][ T9056] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1304.967685][ T9056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.967696][ T9056] usb 5-1: Product: syz [ 1304.967708][ T9056] usb 5-1: Manufacturer: syz [ 1304.967719][ T9056] usb 5-1: SerialNumber: syz [ 1304.969103][ T9056] usb 5-1: config 0 descriptor?? [ 1305.213879][T25348] usb 5-1: USB disconnect, device number 32 13:01:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080905"], 0x3c}}, 0x0) 13:01:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc) getsockname$netlink(r0, 0x0, &(0x7f0000000080)) 13:01:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:31 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:31 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="040000090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dfed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nfs=nostale_ro']) 13:01:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080a05"], 0x3c}}, 0x0) 13:01:31 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1305.782254][T18145] __nla_validate_parse: 6 callbacks suppressed [ 1305.782261][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1305.830395][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1305.916904][T18159] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1305.918965][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1305.930064][T18163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1306.023020][T18171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1306.082725][T25348] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1306.317300][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1306.437657][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1306.437684][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping 13:01:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:32 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080b05"], 0x3c}}, 0x0) 13:01:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, 0x0}}, {{&(0x7f0000003bc0)=@qipcrtr, 0x80, &(0x7f00000008c0)=[{0x0}], 0x1}, 0xb6f}], 0x3, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:01:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) [ 1306.597750][T25348] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1306.597771][T25348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.597822][T25348] usb 5-1: Product: syz [ 1306.597834][T25348] usb 5-1: Manufacturer: syz [ 1306.597844][T25348] usb 5-1: SerialNumber: syz [ 1306.599253][T25348] usb 5-1: config 0 descriptor?? [ 1306.843814][T25348] usb 5-1: USB disconnect, device number 33 [ 1307.391279][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1307.426729][T18198] IPVS: ftp: loaded support on port[0] = 21 13:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) [ 1307.428548][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 13:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080c05"], 0x3c}}, 0x0) 13:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 13:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 13:01:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, 0x0, {0x1200}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080d05"], 0x3c}}, 0x0) [ 1307.587105][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1307.665124][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1307.674596][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1307.688979][T25348] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1307.927298][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1307.957252][ T9583] tipc: TX() has been purged, node left! 13:01:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13:01:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000003c0)='sched\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1145042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) writev(r2, &(0x7f0000001580)=[{&(0x7f0000000400)="834dca8e37a5baaf6db1d4f601791c361ea6868af761b48a42272559486ae555d7c5b1118a013639dd", 0x29}, {0x0}], 0x2) 13:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080e05"], 0x3c}}, 0x0) 13:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) [ 1308.047391][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1308.047409][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1308.207686][T25348] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1308.207702][T25348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.207713][T25348] usb 5-1: Product: syz [ 1308.207724][T25348] usb 5-1: Manufacturer: syz [ 1308.207735][T25348] usb 5-1: SerialNumber: syz [ 1308.209115][T25348] usb 5-1: config 0 descriptor?? [ 1308.453342][T24876] usb 5-1: USB disconnect, device number 34 13:01:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d968000e0000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080f05"], 0x3c}}, 0x0) 13:01:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13:01:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:34 executing program 3: [ 1309.136885][ T29] audit: type=1800 audit(1596632494.457:100): pid=18267 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 [ 1309.158925][ T29] audit: type=1800 audit(1596632494.487:101): pid=18278 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16377 res=0 [ 1309.327295][T25348] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1309.577253][T25348] usb 5-1: Using ep0 maxpacket: 8 13:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280081005"], 0x3c}}, 0x0) 13:01:34 executing program 3: [ 1309.697740][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1309.697757][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1309.857606][T25348] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1309.857623][T25348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.857634][T25348] usb 5-1: Product: syz [ 1309.857645][T25348] usb 5-1: Manufacturer: syz [ 1309.857656][T25348] usb 5-1: SerialNumber: syz [ 1309.860808][T25348] usb 5-1: config 0 descriptor?? [ 1310.105157][T17857] usb 5-1: USB disconnect, device number 35 13:01:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {}, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 13:01:35 executing program 3: 13:01:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280081105"], 0x3c}}, 0x0) 13:01:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:36 executing program 3: 13:01:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280081205"], 0x3c}}, 0x0) 13:01:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13:01:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}}}, 0x24}}, 0x0) [ 1310.977326][T24876] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1311.217238][T24876] usb 5-1: Using ep0 maxpacket: 8 13:01:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13:01:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) [ 1311.316603][T18335] __nla_validate_parse: 7 callbacks suppressed [ 1311.316612][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1311.343114][T24876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1311.364915][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1311.372173][T24876] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1311.537787][T24876] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1311.537804][T24876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.537815][T24876] usb 5-1: Product: syz [ 1311.537827][T24876] usb 5-1: Manufacturer: syz [ 1311.537838][T24876] usb 5-1: SerialNumber: syz [ 1311.544634][T24876] usb 5-1: config 0 descriptor?? [ 1311.783604][T17857] usb 5-1: USB disconnect, device number 36 13:01:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280082505"], 0x3c}}, 0x0) 13:01:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13:01:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}}}, 0x24}}, 0x0) 13:01:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800180000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280083205"], 0x3c}}, 0x0) 13:01:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x1200}}}, 0x24}}, 0x0) 13:01:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) [ 1312.336228][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1312.356289][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1312.667268][T24876] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1312.917268][T24876] usb 5-1: Using ep0 maxpacket: 8 13:01:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) [ 1312.975621][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 13:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280086005"], 0x3c}}, 0x0) [ 1312.999910][T18401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1313.048568][T24876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1313.048586][T24876] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1313.102993][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1313.217793][T24876] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1313.217810][T24876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.217821][T24876] usb 5-1: Product: syz [ 1313.217832][T24876] usb 5-1: Manufacturer: syz [ 1313.217844][T24876] usb 5-1: SerialNumber: syz [ 1313.219331][T24876] usb 5-1: config 0 descriptor?? [ 1313.469083][T24876] usb 5-1: USB disconnect, device number 37 13:01:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:39 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x3c, 0x0) 13:01:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000400028008d105"], 0x3c}}, 0x0) 13:01:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) 13:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080006"], 0x3c}}, 0x0) 13:01:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f00000041c0)=""/91, 0x5b}, {&(0x7f00000058c0)=""/190, 0xbe}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4}, 0xb2c}, {{&(0x7f0000003bc0)=@qipcrtr, 0x80, &(0x7f00000008c0)=[{&(0x7f0000003c40)=""/123, 0x7b}, {&(0x7f0000003d00)=""/217, 0xd9}], 0x2, &(0x7f0000004240)=""/173, 0xad}, 0xb6f}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/190, 0xbe}], 0x1, &(0x7f0000004080)=""/12, 0xc}, 0x7f}], 0x4, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x228, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1c24000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x3b}, {0xfffffffffffffffc}, {0xc88, 0x0, 0x3}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@remote, 0x180000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e23, 0xc75, @mcast2, 0x80000001}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="47713136af4c0609fda6979c8ce656cdef31cfc073375989dd9c7028820adcecf0b74cd8d5851f835dc62233f77a5e2a301c9d62ac368308a16888e7b0f0f9ce4225986b7ad82601029a2a9324562e2b3880e53130badf2ae7938d374bad9e1aa1bad7834a8e0aa821ab30b2ad651488c3383f57344206deec09208208226add8ddd6a744ca66d029658cb64a257d4cb", 0x90}, {&(0x7f00000005c0)="4fa46343bfa6d9d6efa97d34cfe1774e2d451142da14fbea5d895a84692e90cbfb31c7aae86fe1dd53c68456b84c950ab51bd2f43dc6894b99729d4c49281bf2b610fadb649c8e5730feba39e0f98e7fec6d79498c1686ef9229", 0x5a}, {&(0x7f0000000640)="397ffe426d7278475462bbd7ef4082728817268626891c83efa6e462694c295f3dd5e7481abb547b39b4d2d3f77e7bc637b7dea923adea11110a077e8c35c54884ef7b14c3b9ce44e9c9c6221886536d7cf537977be12a0802d09b2123e0d9c34c9d71e33bf9cc5ff81b78f028a5d3ae05d1b9a6621e11f95532dcbfb2b8de99977e7460ba92426eed9821ec39c27b8ebc1378b0f856a99423f3a790ab98b9165f9be99330d77a44567ea89433e0de560302ede1703836faae717cb850121929bfcf5b718fea6b764b9e87095a3bb1c3b04e579f68c9a4b3ec3a530fe9c3937bbb3961a1dec78838", 0xe8}], 0x3, &(0x7f0000000900)=[{0x1010, 0x104, 0x2, "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"}], 0x1010}}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x3f, @remote, 0x1, 0x1}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f00000081c0)=ANY=[@ANYBLOB="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"], 0x1490}}, {{&(0x7f0000005080)=@in6={0xa, 0x4e20, 0x9773, @private1={0xfc, 0x1, [], 0x1}, 0x8}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005100)="1233bc3af40968d0e801d95b724303a7c86c329b4be79c19ad34b8bdf40aaeee9a8f872e77d4b17d15351dcab18a2aba4f550ccb68700e5acef48eb47cfaf19841253d08eaffeb", 0x47}, {&(0x7f0000005180)="efe1e1b266d75b910bc333c117d603b71b81eea9fcdf5a5f56c3948bfe166521e1be683cba5f5d8eb8ce2b514b06836db672cfdf007503a2d5aa4a7db3cabd32355083d186dc4ec83f90ae26961416948960123aea24ad6f073455184f900ede541d538971bd358fc5c85c90b265b49dd9dd", 0x72}, {&(0x7f0000005240)="60065e8cbb71267ed7fb6ca095740de9d61af79d5613afc1ffe1fe92a2b29529fcf635a60d1ce64a5044fe1a40696324e5337fa80196c263ae1343a696", 0x3d}], 0x3, &(0x7f00000052c0)=ANY=[@ANYBLOB="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"], 0x110}}, {{&(0x7f0000005400)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x7, 0x40, "457ddbec9a8d45980335126b97e9179eec63ad716192566949434b8718520f6e4c9cbe118c80bd4f242eb2b6b5d2734b63ba1e23303b24409ab52444fd9946", 0x3f}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)="7a6a217e944702b11e7b6fab22ec71182cfad0480ffd3bc2584ee102026d999701c363f59c71414a36a781b0e24e244617095a0bf21632270ca4419f17a830d6a77042aa49b1d2499086792bf38b87e59b5c22af51743a4dc65286f24877a117c50a1b9d13d11cb7d3fc4c676d19c55c620f005a07cc2ef21fcf1ee8a3f81e850e070b4274e66f281ed56e600c72b924a3a72320ae406e6b53fc5b0aff72be1e6585cfed618030d9e171ce7fe178ae494c65d0ba519db3e21111658a2dd602776e061e8e58d81f8d81c48a3ccda9432f51e2395b9c07a316d4857889e9f145e1497b0123b1f333582462647e095dac96fc81", 0xf2}], 0x1}}], 0x4, 0x2000ff01) socket$inet6(0xa, 0x4, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) [ 1314.040694][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1314.357262][ T8997] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1314.597329][ T8997] usb 5-1: Using ep0 maxpacket: 8 13:01:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080009"], 0x3c}}, 0x0) [ 1314.717455][ T8997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1314.733878][ T8997] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1314.846053][T18464] IPVS: ftp: loaded support on port[0] = 21 [ 1314.957370][ T8997] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1314.957387][ T8997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.957398][ T8997] usb 5-1: Product: syz [ 1314.957409][ T8997] usb 5-1: Manufacturer: syz [ 1314.957419][ T8997] usb 5-1: SerialNumber: syz [ 1314.958819][ T8997] usb 5-1: config 0 descriptor?? [ 1315.204002][T24876] usb 5-1: USB disconnect, device number 38 13:01:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) 13:01:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000400028008000a"], 0x3c}}, 0x0) 13:01:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001a40), 0x2, 0x30041, 0x0) 13:01:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d968001b0000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:01:41 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{}], 0x1, 0x1) 13:01:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) 13:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e00000400028008000b"], 0x3c}}, 0x0) 13:01:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack_expect\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) [ 1316.087278][ T9056] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1316.336653][ T9056] usb 5-1: Using ep0 maxpacket: 8 13:01:41 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{}], 0x1, 0x1) 13:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080011"], 0x3c}}, 0x0) [ 1316.451236][T18530] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1316.467629][ T9056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1316.467646][ T9056] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1316.657647][ T9056] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1316.657674][ T9056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.657687][ T9056] usb 5-1: Product: syz [ 1316.657698][ T9056] usb 5-1: Manufacturer: syz [ 1316.657710][ T9056] usb 5-1: SerialNumber: syz [ 1316.659113][ T9056] usb 5-1: config 0 descriptor?? [ 1316.911223][ T9056] usb 5-1: USB disconnect, device number 39 13:01:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x0) 13:01:42 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{}], 0x1, 0x1) 13:01:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080012"], 0x3c}}, 0x0) 13:01:42 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1317.475482][ T29] audit: type=1800 audit(1596632502.797:102): pid=18551 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16383 res=0 [ 1317.482077][T18551] NFS: Device name not specified [ 1317.486375][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1317.499230][ T29] audit: type=1800 audit(1596632502.827:103): pid=18555 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16383 res=0 13:01:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1947], 0x79b) 13:01:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x0) 13:01:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080013"], 0x3c}}, 0x0) 13:01:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1317.513664][T18555] NFS: Device name not specified [ 1317.797295][T17287] usb 5-1: new high-speed USB device number 40 using dummy_hcd 13:01:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x0) [ 1318.037350][T17287] usb 5-1: Using ep0 maxpacket: 8 13:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080036"], 0x3c}}, 0x0) [ 1318.158093][T17287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1318.158110][T17287] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1318.317636][T17287] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=92.71 [ 1318.317652][T17287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.317664][T17287] usb 5-1: Product: syz [ 1318.317675][T17287] usb 5-1: Manufacturer: syz [ 1318.317687][T17287] usb 5-1: SerialNumber: syz [ 1318.319129][T17287] usb 5-1: config 0 descriptor?? [ 1318.560637][T25348] usb 5-1: USB disconnect, device number 40 13:01:44 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x7, 0x0) 13:01:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080002"], 0x3c}}, 0x0) 13:01:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x32, 0x86, 0x8, 0x4dd, 0x8004, 0x9271, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x20, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 13:01:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c463f090081d96800d80000000003000300ba1000009d0200000000000040000000000000006a0100000000000007000000050038000100030001000300000000600200000000010000000020009800000000000000ef5e0000000000000200000000000000010000000000000008000000000000000400000002000000040000000000000000000000000000000900000000000000ffffff7f000000000300000000000000ff010000000000008557059764942c7b4eba543b87a149ce5b8be3eb9e4d893d710f2ce737b48b09e080b73f85b6bc2816a85b057afb15ec8ef7105bf19ea4f1c66102b23e006d12360a3054c95c74561ec71db4766111df6a5412c5ee3de7a0acde68d033863777ffaf39cda6b6b6fd988acad5248cae66ff4ca97f9234db451d059199e0601b8457dbedd313238fb47accdde56851e2217c9cc6c3da842da5e2cb725b8325db76a03ecf36600c8acede0296e6cf5cc043aa641cc1d1a4497cfb3ecaa21b07da7aae02fbc8acbe65e560f794314306041c77b4a7ea89db34f0104cfed9a270c35015322f2ebe7ff291e0274100"/1947], 0x79b) 13:01:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080006"], 0x3c}}, 0x0) 13:01:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 13:01:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) [ 1319.427267][T25348] usb 5-1: new high-speed USB device number 41 using dummy_hcd 13:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080008"], 0x3c}}, 0x0) 13:01:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x1) 13:01:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 13:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006c6f7770616e000004000280080009"], 0x3c}}, 0x0) [ 1319.667339][T25348] usb 5-1: Using ep0 maxpacket: 8 [ 1319.787621][T25348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1319.787639][T25348] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1319.789909][T18614] ================================================================== [ 1319.789980][T18614] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x3fe/0xdb0 [ 1319.789992][T18614] Read of size 9 at addr ffff888088e43d30 by task syz-executor.5/18614 [ 1319.789996][T18614] [ 1319.790009][T18614] CPU: 0 PID: 18614 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 1319.790016][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.790020][T18614] Call Trace: [ 1319.790043][T18614] dump_stack+0x1f0/0x31e [ 1319.790064][T18614] print_address_description+0x66/0x5a0 [ 1319.790077][T18614] ? vprintk_emit+0x342/0x3c0 [ 1319.790093][T18614] ? printk+0x62/0x83 [ 1319.790107][T18614] ? vprintk_emit+0x339/0x3c0 [ 1319.790124][T18614] kasan_report+0x132/0x1d0 [ 1319.790137][T18614] ? soft_cursor+0x3fe/0xdb0 [ 1319.790155][T18614] check_memory_region+0x2b5/0x2f0 [ 1319.790165][T18614] ? soft_cursor+0x3fe/0xdb0 [ 1319.790188][T18614] memcpy+0x25/0x60 [ 1319.790201][T18614] soft_cursor+0x3fe/0xdb0 [ 1319.790222][T18614] bit_cursor+0x178a/0x2180 [ 1319.790255][T18614] ? fbcon_cursor+0x7e1/0xc00 [ 1319.790277][T18614] hide_cursor+0x7e/0x310 [ 1319.790294][T18614] redraw_screen+0x148/0x16f0 [ 1319.790316][T18614] vc_do_resize+0x154f/0x1d00 [ 1319.790354][T18614] vt_ioctl+0x3185/0x3ec0 [ 1319.790376][T18614] ? lockdep_hardirqs_off+0x29/0xb0 [ 1319.790390][T18614] ? _raw_spin_unlock_irqrestore+0x68/0xd0 [ 1319.790401][T18614] ? trace_hardirqs_off+0x2d/0x70 [ 1319.790417][T18614] ? trace_lock_release+0x137/0x1a0 [ 1319.790436][T18614] ? rcu_lock_release+0x5/0x20 [ 1319.790453][T18614] ? tomoyo_path_number_perm+0x58f/0x690 [ 1319.790478][T18614] ? tty_jobctrl_ioctl+0x1e8/0xbd0 [ 1319.790495][T18614] tty_ioctl+0xee4/0x15c0 [ 1319.790511][T18614] ? do_vfs_ioctl+0x6bc/0x16d0 [ 1319.790532][T18614] ? tty_do_resize+0x180/0x180 [ 1319.790542][T18614] __se_sys_ioctl+0xf9/0x160 [ 1319.790557][T18614] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1319.790570][T18614] do_syscall_64+0x73/0xe0 [ 1319.790587][T18614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1319.790599][T18614] RIP: 0033:0x45ccd9 [ 1319.790612][T18614] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1319.790619][T18614] RSP: 002b:00007f7a0e805c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.790633][T18614] RAX: ffffffffffffffda RBX: 000000000001c300 RCX: 000000000045ccd9 [ 1319.790641][T18614] RDX: 0000000020000040 RSI: 000000000000560a RDI: 0000000000000003 [ 1319.790649][T18614] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1319.790658][T18614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1319.790666][T18614] R13: 00007fffb449cbbf R14: 00007f7a0e8069c0 R15: 000000000078bf0c [ 1319.790697][T18614] [ 1319.790705][T18614] Allocated by task 6688: [ 1319.790718][T18614] __kasan_kmalloc+0x103/0x140 [ 1319.790729][T18614] __kmalloc+0x24b/0x330 [ 1319.790739][T18614] fbcon_set_font+0x2c4/0x970 [ 1319.790749][T18614] con_font_op+0xebc/0x1630 [ 1319.790760][T18614] vt_ioctl+0x179d/0x3ec0 [ 1319.790770][T18614] tty_ioctl+0xee4/0x15c0 [ 1319.790781][T18614] __se_sys_ioctl+0xf9/0x160 [ 1319.790792][T18614] do_syscall_64+0x73/0xe0 [ 1319.790804][T18614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1319.790808][T18614] [ 1319.790814][T18614] Freed by task 6118: [ 1319.790825][T18614] __kasan_slab_free+0x114/0x170 [ 1319.790834][T18614] kfree+0x10a/0x220 [ 1319.790845][T18614] __kfree_skb+0x56/0x1c0 [ 1319.790855][T18614] skb_queue_purge+0x131/0x1c0 [ 1319.790865][T18614] netlink_sock_destruct+0xd6/0x250 [ 1319.790877][T18614] __sk_destruct+0x50/0x770 [ 1319.790888][T18614] rcu_core+0x826/0x1170 [ 1319.790896][T18614] __do_softirq+0x236/0x66c [ 1319.790899][T18614] [ 1319.790909][T18614] The buggy address belongs to the object at ffff888088e43c00 [ 1319.790909][T18614] which belongs to the cache kmalloc-512 of size 512 [ 1319.790920][T18614] The buggy address is located 304 bytes inside of [ 1319.790920][T18614] 512-byte region [ffff888088e43c00, ffff888088e43e00) [ 1319.790925][T18614] The buggy address belongs to the page: [ 1319.790937][T18614] page:ffffea00022390c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 1319.790946][T18614] flags: 0xfffe0000000200(slab) [ 1319.790961][T18614] raw: 00fffe0000000200 ffffea0002402c48 ffffea000228b9c8 ffff8880aa400a80 [ 1319.790975][T18614] raw: 0000000000000000 ffff888088e43000 0000000100000004 0000000000000000 [ 1319.790981][T18614] page dumped because: kasan: bad access detected [ 1319.790984][T18614] [ 1319.790988][T18614] Memory state around the buggy address: [ 1319.790997][T18614] ffff888088e43c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1319.791006][T18614] ffff888088e43c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1319.791014][T18614] >ffff888088e43d00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.791019][T18614] ^ [ 1319.791028][T18614] ffff888088e43d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.791037][T18614] ffff888088e43e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1319.791042][T18614] ================================================================== [ 1319.791046][T18614] Disabling lock debugging due to kernel taint [ 1319.792448][T18614] Kernel panic - not syncing: panic_on_warn set ... [ 1319.792460][T18614] CPU: 0 PID: 18614 Comm: syz-executor.5 Tainted: G B 5.8.0-syzkaller #0 [ 1319.792465][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.792468][T18614] Call Trace: [ 1319.792481][T18614] dump_stack+0x1f0/0x31e [ 1319.792496][T18614] panic+0x264/0x7a0 [ 1319.792508][T18614] ? trace_hardirqs_on+0x30/0x80 [ 1319.792521][T18614] kasan_report+0x1c9/0x1d0 [ 1319.792532][T18614] ? soft_cursor+0x3fe/0xdb0 [ 1319.792545][T18614] check_memory_region+0x2b5/0x2f0 [ 1319.792553][T18614] ? soft_cursor+0x3fe/0xdb0 [ 1319.792564][T18614] memcpy+0x25/0x60 [ 1319.792573][T18614] soft_cursor+0x3fe/0xdb0 [ 1319.792587][T18614] bit_cursor+0x178a/0x2180 [ 1319.792607][T18614] ? fbcon_cursor+0x7e1/0xc00 [ 1319.792621][T18614] hide_cursor+0x7e/0x310 [ 1319.792632][T18614] redraw_screen+0x148/0x16f0 [ 1319.792647][T18614] vc_do_resize+0x154f/0x1d00 [ 1319.792667][T18614] vt_ioctl+0x3185/0x3ec0 [ 1319.792681][T18614] ? lockdep_hardirqs_off+0x29/0xb0 [ 1319.792694][T18614] ? _raw_spin_unlock_irqrestore+0x68/0xd0 [ 1319.792703][T18614] ? trace_hardirqs_off+0x2d/0x70 [ 1319.792715][T18614] ? trace_lock_release+0x137/0x1a0 [ 1319.792729][T18614] ? rcu_lock_release+0x5/0x20 [ 1319.792742][T18614] ? tomoyo_path_number_perm+0x58f/0x690 [ 1319.792757][T18614] ? tty_jobctrl_ioctl+0x1e8/0xbd0 [ 1319.792769][T18614] tty_ioctl+0xee4/0x15c0 [ 1319.792780][T18614] ? do_vfs_ioctl+0x6bc/0x16d0 [ 1319.792793][T18614] ? tty_do_resize+0x180/0x180 [ 1319.792803][T18614] __se_sys_ioctl+0xf9/0x160 [ 1319.792816][T18614] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1319.792825][T18614] do_syscall_64+0x73/0xe0 [ 1319.792838][T18614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1319.792845][T18614] RIP: 0033:0x45ccd9 [ 1319.792855][T18614] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1319.792861][T18614] RSP: 002b:00007f7a0e805c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.792872][T18614] RAX: ffffffffffffffda RBX: 000000000001c300 RCX: 000000000045ccd9 [ 1319.792879][T18614] RDX: 0000000020000040 RSI: 000000000000560a RDI: 0000000000000003 [ 1319.792886][T18614] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1319.792893][T18614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1319.792899][T18614] R13: 00007fffb449cbbf R14: 00007f7a0e8069c0 R15: 000000000078bf0c [ 1319.794088][T18614] Kernel Offset: disabled