[ 40.535967][ T26] audit: type=1800 audit(1554702962.299:26): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.558185][ T26] audit: type=1800 audit(1554702962.309:27): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.578650][ T26] audit: type=1800 audit(1554702962.309:28): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.689961][ T26] audit: type=1800 audit(1554702963.499:29): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. 2019/04/08 05:56:13 fuzzer started 2019/04/08 05:56:16 dialing manager at 10.128.0.26:34543 2019/04/08 05:56:16 syscalls: 2408 2019/04/08 05:56:16 code coverage: enabled 2019/04/08 05:56:16 comparison tracing: enabled 2019/04/08 05:56:16 extra coverage: extra coverage is not supported by the kernel 2019/04/08 05:56:16 setuid sandbox: enabled 2019/04/08 05:56:16 namespace sandbox: enabled 2019/04/08 05:56:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/08 05:56:16 fault injection: enabled 2019/04/08 05:56:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/08 05:56:16 net packet injection: enabled 2019/04/08 05:56:16 net device setup: enabled 05:58:36 executing program 0: syzkaller login: [ 194.600424][ T7786] IPVS: ftp: loaded support on port[0] = 21 05:58:36 executing program 1: [ 194.709000][ T7786] chnl_net:caif_netlink_parms(): no params data found [ 194.806203][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.818249][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.847296][ T7786] device bridge_slave_0 entered promiscuous mode [ 194.856491][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.872473][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.880796][ T7786] device bridge_slave_1 entered promiscuous mode [ 194.903044][ T7789] IPVS: ftp: loaded support on port[0] = 21 [ 194.923047][ T7786] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.946719][ T7786] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:58:36 executing program 2: [ 194.985537][ T7786] team0: Port device team_slave_0 added [ 194.996186][ T7786] team0: Port device team_slave_1 added [ 195.111107][ T7786] device hsr_slave_0 entered promiscuous mode 05:58:37 executing program 3: [ 195.207578][ T7786] device hsr_slave_1 entered promiscuous mode [ 195.295621][ T7792] IPVS: ftp: loaded support on port[0] = 21 [ 195.303092][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.310330][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.318108][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.325183][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.396340][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 195.523331][ T7795] IPVS: ftp: loaded support on port[0] = 21 [ 195.543093][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.552015][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.561438][ T7789] device bridge_slave_0 entered promiscuous mode 05:58:37 executing program 4: [ 195.572957][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.581759][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.591203][ T7789] device bridge_slave_1 entered promiscuous mode [ 195.641076][ T7789] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.671417][ T7789] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.705775][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.768359][ T7786] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.775330][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.786479][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.805400][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.815926][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 195.862274][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.872975][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.882854][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.890461][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.905138][ T7798] IPVS: ftp: loaded support on port[0] = 21 [ 195.909465][ T7789] team0: Port device team_slave_0 added 05:58:37 executing program 5: [ 195.933596][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.942436][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.952911][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.960037][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.970189][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.989573][ T7789] team0: Port device team_slave_1 added [ 195.995451][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 196.056330][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.066153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.078142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.086615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.098813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.179981][ T7789] device hsr_slave_0 entered promiscuous mode [ 196.217627][ T7789] device hsr_slave_1 entered promiscuous mode [ 196.272232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.280922][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.289293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.332197][ T7786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.333427][ T7802] IPVS: ftp: loaded support on port[0] = 21 [ 196.343861][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.389719][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.399574][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.420160][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.427527][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.435115][ T7792] device bridge_slave_0 entered promiscuous mode [ 196.445898][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.453347][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.461626][ T7792] device bridge_slave_1 entered promiscuous mode [ 196.478096][ T7795] chnl_net:caif_netlink_parms(): no params data found [ 196.525687][ T7792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.541396][ T7792] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.578782][ T7792] team0: Port device team_slave_0 added [ 196.591408][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.632029][ T7792] team0: Port device team_slave_1 added [ 196.690101][ T7792] device hsr_slave_0 entered promiscuous mode [ 196.717548][ T7792] device hsr_slave_1 entered promiscuous mode 05:58:38 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 196.849723][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.863912][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.887903][ T7795] device bridge_slave_0 entered promiscuous mode 05:58:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0x3fb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180)="01", 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240)="342f9cc73d2f7bdf7b169ca032e367cd5e40ac22f2e2bd1fe1254e0c77bbf1b5c02a267088ce293990b44466a2f9b5cdbc50ddb728b89df9a79f16d9dd7bde88410ac06f891edc007901518cd33e9e5bb16bb358be519fbdbd130d82adf2cdd2242980052b82b7a96995f6e3f770a7d4798970ade1438f1fa5edce6af081733a1f202004a7fc66ddcffddda95d176b11e73f0ee6e2e49dadeefcb0066d7c837864d87473f47da6a1eb8d0e104460299ff276420f1ebb5bcfbb2db28ed54c48f604593ad71c79cbf2ec1ce8125a8276", 0x0}, 0x18) [ 196.896897][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.909890][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.920029][ T7795] device bridge_slave_1 entered promiscuous mode 05:58:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @dev}, 0xa1) close(r1) [ 196.956417][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 197.017358][ T7795] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.028560][ T7795] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:58:38 executing program 0: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffffff9}], 0x1) [ 197.081867][ T7802] chnl_net:caif_netlink_parms(): no params data found [ 197.103988][ T7795] team0: Port device team_slave_0 added 05:58:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x11}]]}}}]}, 0x3c}}, 0x0) [ 197.152797][ T7795] team0: Port device team_slave_1 added [ 197.162075][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.181497][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.194937][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state 05:58:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 197.203826][ T7798] device bridge_slave_0 entered promiscuous mode [ 197.213781][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.221312][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.229274][ T7798] device bridge_slave_1 entered promiscuous mode [ 197.242884][ T7823] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 197.310440][ T7795] device hsr_slave_0 entered promiscuous mode [ 197.347939][ T7795] device hsr_slave_1 entered promiscuous mode 05:58:39 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getgid() getpgrp(0xffffffffffffffff) lstat(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 197.444732][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.456236][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.465375][ T7802] device bridge_slave_0 entered promiscuous mode [ 197.477733][ T7798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.497747][ T7798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.506270][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.514051][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.522404][ T7802] device bridge_slave_1 entered promiscuous mode [ 197.532352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.540418][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.555933][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.569076][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.578635][ C0] hrtimer: interrupt took 34676 ns [ 197.617864][ T7798] team0: Port device team_slave_0 added [ 197.638780][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.653728][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.662644][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.669760][ T7801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.683561][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.692325][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.706254][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.713377][ T7801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.726916][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.735758][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.750530][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.763009][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.779949][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.790251][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.798972][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.806851][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.817717][ T7802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.829207][ T7802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.844002][ T7798] team0: Port device team_slave_1 added [ 197.855578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.863821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.872127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.880862][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.889228][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.896868][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.914322][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.000194][ T7798] device hsr_slave_0 entered promiscuous mode [ 198.039888][ T7798] device hsr_slave_1 entered promiscuous mode [ 198.083164][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.101694][ T7802] team0: Port device team_slave_0 added [ 198.109684][ T7802] team0: Port device team_slave_1 added [ 198.137918][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.149204][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.158537][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.165605][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.173419][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.182574][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.191376][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.198507][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.206124][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.215192][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.245103][ T7792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.257516][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.269410][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.280737][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.289793][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.298356][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.306848][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.316026][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.324767][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.334657][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.343683][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.352829][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.361247][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.460900][ T7802] device hsr_slave_0 entered promiscuous mode [ 198.507816][ T7802] device hsr_slave_1 entered promiscuous mode [ 198.580329][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.654938][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 05:58:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)) [ 198.696558][ T7795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.732371][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.803941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.824482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.843301][ T7795] 8021q: adding VLAN 0 to HW filter on device team0 05:58:40 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000001740)='l', 0x1}], 0x1, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x0) [ 198.860154][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.883915][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.893501][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.931294][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.968680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.980979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.989976][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.997030][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.005380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.017876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.029476][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.036522][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.044286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.052969][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.061459][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.068545][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.076935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.085052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.112937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.122245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.130911][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.138022][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.145617][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.154565][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.163154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.171631][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.180688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.189500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.198626][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.212045][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.227784][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.235624][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.246359][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.255190][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.264224][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.273141][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.281838][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.288946][ T7838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.300509][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.308714][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.317066][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.325638][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.334673][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.356418][ T7798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.367069][ T7798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.381333][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.389809][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.398580][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.406801][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.413887][ T7801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.422637][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.432756][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.441250][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.449659][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.458105][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.466272][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.476701][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.484397][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.492758][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.519874][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.533493][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.554647][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.584633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.596548][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.608045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.616513][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.626900][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.636230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.645050][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.653950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.691207][ T7802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.718864][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.745100][ T7795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.760086][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.769047][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.827054][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv0 05:58:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x15555555555555b5, 0x0, 0x0, 0xfffffffffffffed4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@nat={'nat\x00', 0x19, 0x5, 0x3a8, [0x20000380, 0x0, 0x0, 0x20000620, 0x200007a0], 0x0, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x18, 0x0, 'bridge_slave_1\x00', 'veth1_to_bond\x00', 'veth1_to_bridge\x00', 'ipddp0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="abae5601fa02", [0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa0, 0xd8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x818}}}]}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x1, 0x89e7, 'nlmon0\x00', 'veth0_to_bridge\x00', 'bridge0\x00', 'veth0_to_bridge\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xe0, 0x118, 0x150, [@devgroup={'devgroup\x00', 0x18, {{0x0, 0x0, 0x1ff, 0x0, 0xfff}}}, @connlabel={'connlabel\x00', 0x8, {{0xbe21, 0x3}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@random="b457ebdb3e08", 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="cc542175457b", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x1d, 0x24, 0x2, 'rose0\x00', 'lapb0\x00', 'ip6gre0\x00', 'syzkaller1\x00', @dev={[], 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0xff], 0x70, 0xb8, 0xf0}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0x20, 0x6a1}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x420) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x52) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:58:41 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getgid() getpgrp(0xffffffffffffffff) lstat(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:41 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f0000001480)=[{&(0x7f0000002780)="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", 0xbbf}], 0x1, 0x0) 05:58:41 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000001740)='l', 0x1}], 0x1, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x0) 05:58:41 executing program 1: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x0, 0x989680}, 0x6, {0x7}, 0x9, 0x0, 0x400000000000000}) close(0xffffffffffffffff) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000}) write$P9_RWRITE(r1, &(0x7f0000000500)={0xb, 0x77, 0x2, 0x2}, 0xb) setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) getpid() ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='trusted.overlay.redirect\x00', 0xfffffffffffffffb) epoll_pwait(r1, &(0x7f0000000580)=[{}, {}, {}, {}], 0x4, 0x1, &(0x7f00000005c0)={0x7fff}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x6b6c, @dev, 0xfffffffffffffff7}, 0x1c) clock_gettime(0x0, &(0x7f0000000600)) semop(0x0, 0x0, 0xf) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 05:58:41 executing program 4: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000200)='/\x91\x0f\xe8\x0e\xb5\x959\xf1;E6\xb1\x10\xf2\xeb\xdd\t\'\xb4\x85\xa5at$\xbdr{\xe5=\xef+_\xc7E\x06\xa3\x18\f\xe4\xd8+\x8d]eRf\xad\xcd\xa0h{\x80\xc8\'n\xef\xa2Y\xa5\x82\xc4T\xbb\xe1]\x193\xf8\x98*\x81\x14X\xbatb\x12g\x907\xdc\x06lL\x8aU\x03\r\"\xacq\xa7k}\x1e\xab\xfe\xff\xba\xf6W\xfe8\xfdg\xf0\x1f\xddq!\xaeE\xa0\x0e\x83\x1e\xd4\x12\xfb%\xf27N\xbb@_\xd0>\x03_\xd4\xa5\x90\x89\n\"\f\x9a\xbe\x84\x01\xb2U\xb5:\xcb\x05\x84\xe6\x05\xc1\xfd\xfc\xa1:\xddS\x9c\xb4\r@#L\xc0\v\xa9^\xa5\xc3\xbf%\xe6\x99_2P[\x96\x8aN\x1da\x9bo\xda`\xe6\v\xda\x85\xf0\xa0Y\xd1)\x15>\xbf\x8f\r\x9d\x9f\xc7JF\xe6\ad\xfd\xe8Ou\x01\xee5\xd2k\x80\xf5\xcec\x12\x0erS\xddo\x1c\xc8\x82\xa8\xbbO[*\x98\xa8x\xfe\x9f\xfdU\xe7\x8e\x02\xed1\xba1\xc1aP\xe9]\x9d\xfe\xca\x11\x0ev6\x87\x12\xf9\x92\x98\xa4\xc2\xbdc)\xb2?\x93\x13\x16\x88]\x06A\xe8\x18\x80\xde\x99 \xfa\x9d\x1fh\xafO\x80') 05:58:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fstat(r1, &(0x7f00000003c0)) [ 200.034048][ T7868] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 05:58:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) getpgrp(0xffffffffffffffff) lstat(0x0, &(0x7f0000001300)) getresuid(0x0, &(0x7f0000002000), &(0x7f0000002040)) stat(0x0, &(0x7f00000020c0)) lstat(0x0, &(0x7f00000021c0)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:42 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) unlink(&(0x7f0000000040)='./bus\x00') 05:58:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x2) 05:58:42 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 05:58:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300028, 0x3a, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 200.435225][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0x3fb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240)="342f9cc73d2f7bdf7b169ca032e367cd5e40ac22f2e2bd1fe1254e0c77bbf1b5c02a267088ce293990b44466a2f9b5cdbc50ddb728b89df9a79f16d9dd7bde88410ac06f891edc007901518cd33e9e5bb16bb358be519fbdbd130d82adf2cdd2242980052b82b7a96995f6e3f770a7d4798970ade1438f1fa5edce6af081733a1f202004a7fc66ddcffddda95d176b11e73f0ee6e2e49dadeefcb0066d7c837864d87473f47da6a1eb8d0e104460299ff276420f1ebb5bcfbb2db28ed54c48f604593ad71c79cbf2ec1ce8125a8276", 0x0}, 0x18) 05:58:42 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x7ffe, 0x88003) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x9) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) timer_create(0x0, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) write$ppp(r0, &(0x7f0000000140)="2f8e1eec7f25978acad9402b809a", 0xe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a4") 05:58:42 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000001740)='l', 0x1}], 0x1, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000280)="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", 0x804}], 0x1, 0x0) 05:58:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x101, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) [ 201.063925][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f0000000380)) 05:58:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x2) 05:58:43 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1002}, {&(0x7f0000000240)=""/147, 0x6a6}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x2, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000501000000000052d0000000000078830c269bec6865c7010f11ced567c0c0afddcd8535f5cbdd41b6f8981e0196fc8bd625ef299ec8ce0ee234c9ebcf13a9b2c70ba7e53f2e56e6b2d01d018bfd751eb98a56b666a48354e413fa65c06ada08221b04f52cce6b146237e2c00035"], 0x1}}, 0x0) 05:58:43 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000380)) 05:58:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x541b, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) [ 201.355362][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:43 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:43 executing program 0: socket$inet6(0xa, 0x3, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, 0x0}, 0x4000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x3, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x400000000001405, 0xffffffffffffffff) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 05:58:43 executing program 2: open(0x0, 0x3, 0x0) 05:58:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x541b, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 05:58:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x2) [ 201.540930][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:43 executing program 5: 05:58:43 executing program 2: 05:58:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x2) 05:58:43 executing program 2: [ 201.742916][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:44 executing program 3: 05:58:44 executing program 0: 05:58:44 executing program 5: 05:58:44 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:44 executing program 2: 05:58:44 executing program 5: 05:58:44 executing program 0: 05:58:44 executing program 3: 05:58:44 executing program 0: 05:58:44 executing program 3: 05:58:44 executing program 2: [ 202.378446][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:44 executing program 5: 05:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:44 executing program 3: 05:58:44 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:44 executing program 5: 05:58:44 executing program 2: 05:58:44 executing program 0: 05:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:44 executing program 3: 05:58:44 executing program 0: 05:58:44 executing program 2: 05:58:44 executing program 3: 05:58:44 executing program 5: 05:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:44 executing program 3: 05:58:45 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 05:58:45 executing program 0: 05:58:45 executing program 2: 05:58:45 executing program 5: 05:58:45 executing program 3: 05:58:45 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:45 executing program 2: 05:58:45 executing program 0: 05:58:45 executing program 5: mprotect(&(0x7f000007b000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 05:58:45 executing program 3: [ 203.815088][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:45 executing program 0: 05:58:45 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 204.046552][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:46 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 05:58:46 executing program 5: 05:58:46 executing program 2: 05:58:46 executing program 3: 05:58:46 executing program 0: 05:58:46 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:46 executing program 3: 05:58:46 executing program 2: 05:58:46 executing program 0: 05:58:46 executing program 5: [ 204.699222][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:46 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:46 executing program 2: [ 204.902331][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:47 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 05:58:47 executing program 3: 05:58:47 executing program 5: 05:58:47 executing program 0: 05:58:47 executing program 2: 05:58:47 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:47 executing program 5: 05:58:47 executing program 2: 05:58:47 executing program 3: [ 205.539778][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:47 executing program 0: 05:58:47 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:47 executing program 3: [ 205.755685][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:48 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:48 executing program 5: 05:58:48 executing program 0: 05:58:48 executing program 2: 05:58:48 executing program 3: 05:58:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:48 executing program 0: 05:58:48 executing program 3: 05:58:48 executing program 2: 05:58:48 executing program 5: [ 206.400520][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:48 executing program 5: [ 206.590471][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:49 executing program 3: 05:58:49 executing program 2: 05:58:49 executing program 0: 05:58:49 executing program 5: 05:58:49 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:49 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:49 executing program 3: [ 207.256922][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:49 executing program 0: 05:58:49 executing program 2: 05:58:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:49 executing program 5: 05:58:49 executing program 3: [ 207.393934][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:49 executing program 2: 05:58:49 executing program 3: 05:58:49 executing program 5: 05:58:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 207.661629][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:49 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:49 executing program 0: 05:58:49 executing program 2: 05:58:49 executing program 3: 05:58:49 executing program 5: 05:58:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:50 executing program 5: 05:58:50 executing program 3: 05:58:50 executing program 2: [ 208.175501][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:50 executing program 0: 05:58:50 executing program 3: 05:58:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 208.455697][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:50 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:50 executing program 5: 05:58:50 executing program 2: 05:58:50 executing program 0: 05:58:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x216) connect$inet(r0, &(0x7f0000000180), 0x10) shutdown(r0, 0x1) 05:58:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000050010df333f220005001a0005753f3787c34c05ce72d0d2c659c2991ea038687d7c01b3060002000020000000000100"], 0x38}}, 0x0) 05:58:50 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0xffefffffff7f0000) 05:58:50 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x9, 0x4, 0xfffffffffffffff9, 0xfffffffffffffffe}) ioctl$int_in(0xffffffffffffffff, 0x800000c0045006, 0x0) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000004c0)=0x0) sched_setaffinity(r1, 0xfffffffffffffd36, &(0x7f0000000140)=0x40000000000009) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="00082cbd7000ffdbdf25010000000000000001410000001c0017"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) shmat(r2, &(0x7f0000b62000/0x1000)=nil, 0x0) shmdt(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000300), 0x1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) inotify_add_watch(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000480)=@sha1={0x1, "ff04d18c25564647592d485f6e3abd563af9bbc9"}, 0x8, 0x0) iopl(0x9) read$FUSE(r0, &(0x7f0000000500), 0x1000) [ 209.060908][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:50 executing program 2: 05:58:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:51 executing program 2: 05:58:51 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:51 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0), 0x4) timer_create(0x0, 0x0, 0x0) times(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) timer_delete(0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r1, &(0x7f0000000080), 0x80000003) 05:58:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) rmdir(0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 05:58:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getegid() sendto(r0, &(0x7f0000000000)="7aad1a0d9bb310a46eeadb23a34177990bd96766fcffffffffffffff37ebf041d0df158802cc514d8f8bdcf2391244f7bb724edcd60f4f52e31e909a2bd15a9359aab7b6f6c3ea91533e52725926022eaf61ffe581931ab79be8ccb25ffdf77955a292bcd19ef713dcc4e2dbd41f8700000000000000", 0x76, 0x8080, 0x0, 0x0) 05:58:51 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100, 0x0) 05:58:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:51 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000005340)={0x0, 0x9, 0x20, 0x100000000, 0x9}, &(0x7f0000005380)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000053c0)=@assoc_value={0x0, 0xbc}, &(0x7f0000005400)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000005440)={r3, 0x8cf3, 0xffffffff, 0x7f, 0x8, 0x33f, 0x0, 0xe3d, {r4, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1, 0x7, 0x7fff}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000040)=""/159, &(0x7f0000000100)=0x9f) r5 = accept(r0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005080)=[{{&(0x7f00000034c0)=@llc={0x1a, 0x101, 0x7, 0x9, 0x1, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000038c0)="756d240f6e79", 0x6}], 0x1}, 0x672c7877}, {{&(0x7f0000004b80)=@nl=@unspec, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004ec0)}], 0x1}, 0x8000}], 0x2, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r5) [ 209.792836][ T8300] dccp_close: ABORT with 6 bytes unread 05:58:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140), 0x2) 05:58:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000050010df333f220005001a0005753f3787c34c05ce72d0d2c659c2991ea038687d7c01b3060002000020000002000000"], 0x38}}, 0x0) 05:58:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) dup2(r1, r0) 05:58:52 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:52 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000005340)={0x0, 0x9, 0x20, 0x100000000, 0x9}, &(0x7f0000005380)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000053c0)=@assoc_value={0x0, 0xbc}, &(0x7f0000005400)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000005440)={r3, 0x8cf3, 0xffffffff, 0x7f, 0x8, 0x33f, 0x0, 0xe3d, {r4, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1, 0x7, 0x7fff}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000040)=""/159, &(0x7f0000000100)=0x9f) r5 = accept(r0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005080)=[{{&(0x7f00000034c0)=@llc={0x1a, 0x101, 0x7, 0x9, 0x1, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000038c0)="756d240f6e79", 0x6}], 0x1}, 0x672c7877}, {{&(0x7f0000004b80)=@nl=@unspec, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004ec0)}], 0x1}, 0x8000}], 0x2, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r5) 05:58:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f00000004c0)='./bus\x00', 0x141049, 0x0) write$UHID_INPUT(r1, &(0x7f0000002480)={0x8, "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", 0x1000}, 0x1006) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) 05:58:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x1be) 05:58:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") unshare(0x24020400) timerfd_gettime(0xffffffffffffffff, 0x0) 05:58:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 05:58:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x3fbf90a761f787e3) recvmsg(r0, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:58:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:52 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x3fbf90a761f787e3) recvmsg(r0, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 05:58:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = dup(r0) sendto$inet6(r3, &(0x7f0000000040)="0204000003006000000000d8c42bbb09c2007f2e66588027cd00fff55b42e886c8194d699539ccf8e0f35bc2", 0x2c, 0x0, 0x0, 0x0) [ 210.593107][ T8360] __nla_parse: 6 callbacks suppressed [ 210.593209][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:52 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:52 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000005340)={0x0, 0x9, 0x20, 0x100000000, 0x9}, &(0x7f0000005380)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000053c0)=@assoc_value={0x0, 0xbc}, &(0x7f0000005400)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000005440)={r3, 0x8cf3, 0xffffffff, 0x7f, 0x8, 0x33f, 0x0, 0xe3d, {r4, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1, 0x7, 0x7fff}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000040)=""/159, &(0x7f0000000100)=0x9f) r5 = accept(r0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005080)=[{{&(0x7f00000034c0)=@llc={0x1a, 0x101, 0x7, 0x9, 0x1, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000038c0)="756d240f6e79", 0x6}], 0x1}, 0x672c7877}, {{&(0x7f0000004b80)=@nl=@unspec, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004ec0)}], 0x1}, 0x8000}], 0x2, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r5) 05:58:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:52 executing program 3: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@context={'context', 0x3d, 'sysadm_u'}}]}}) 05:58:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_capability(0x0, 0x0, 0x0, 0xe5, 0x0) r2 = gettid() getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001280)={0x0, 0x4000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001240)) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x34e) accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x0) socket(0x9, 0x7, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) tkill(r2, 0x1000000000016) [ 211.197726][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 211.279332][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 05:58:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f000000e240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x34910}], 0x1) poll(0x0, 0x0, 0x0) [ 211.336710][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:53 executing program 5: socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) close(r1) 05:58:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000010000000000000006ad0b0e8ea0805a2c4c51bef48b92d44e"]) [ 211.527999][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:53 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:53 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000005340)={0x0, 0x9, 0x20, 0x100000000, 0x9}, &(0x7f0000005380)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000053c0)=@assoc_value={0x0, 0xbc}, &(0x7f0000005400)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000005440)={r3, 0x8cf3, 0xffffffff, 0x7f, 0x8, 0x33f, 0x0, 0xe3d, {r4, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1, 0x7, 0x7fff}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000040)=""/159, &(0x7f0000000100)=0x9f) r5 = accept(r0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005080)=[{{&(0x7f00000034c0)=@llc={0x1a, 0x101, 0x7, 0x9, 0x1, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000038c0)="756d240f6e79", 0x6}], 0x1}, 0x672c7877}, {{&(0x7f0000004b80)=@nl=@unspec, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004ec0)}], 0x1}, 0x8000}], 0x2, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r5) 05:58:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00038aa1642b7f0789b23cd3735e"], 0xe) 05:58:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x11, &(0x7f00000000c0), 0x10) 05:58:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000040)="26f8d577393c0e73413fb9c346a6574163aff2990849e99dbe1a25edd1ae13024507dbebb7f9d16484f13417fba50b6c9562e80b1184a93c9d33af22bf9d34e5838fb947ad71e37951846a0200000023b0e5ab27f7a57b59ddd87426cf17199571d6e37800"/111, 0x6f, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) [ 212.060069][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:54 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$netlink(0x10, 0x3, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x2000000000012) [ 212.248802][ T8442] device nr0 entered promiscuous mode [ 212.257009][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:58:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:54 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, &(0x7f0000000cc0)=""/71, 0x47}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 05:58:54 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) socket$netlink(0x10, 0x3, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x2000000000012) 05:58:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:54 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) init_module(0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) socket$netlink(0x10, 0x3, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000200)='\x00'/10, 0x0) tkill(r0, 0x2000000000012) 05:58:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 05:58:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:54 executing program 2: r0 = creat(&(0x7f0000000480)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESOCT], 0x100000208) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file2\x00') statfs(&(0x7f0000000980)='./file2\x00', 0x0) 05:58:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:55 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 05:58:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) 05:58:57 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') creat(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 05:58:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) 05:58:57 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:57 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000680), 0x0) pipe(&(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) 05:58:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x17b, 0x800000c0]}) 05:58:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:58:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) 05:58:57 executing program 3: r0 = memfd_create(&(0x7f0000000240)='o\xc04\xb2Y]\x92\xf1\xc5\b\x15\xc9&!3a\xf6\x9f:3\xbclq', 0x0) write$eventfd(r0, &(0x7f0000000080), 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)) fallocate(r1, 0x11, 0x0, 0x107fff) 05:58:57 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 05:58:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 05:58:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x140, 0x800000c0]}) 05:58:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 05:58:58 executing program 5: 05:58:58 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:58:58 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:58:58 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaa0dba61cd9da8f0e4"], 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) 05:58:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 05:58:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000000140)=""/25, 0x19) getdents64(r0, &(0x7f0000000300)=""/233, 0x20) 05:58:58 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:58 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x30000500) 05:58:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 05:58:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0xfea1}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 05:58:59 executing program 0: pipe(&(0x7f00000000c0)) pipe2(&(0x7f0000000680), 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 05:58:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 05:58:59 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:58:59 executing program 3: 05:58:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0xfea1}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 05:58:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 05:58:59 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:59 executing program 0: pipe(&(0x7f00000000c0)) pipe2(&(0x7f0000000680), 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:58:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 05:58:59 executing program 3: 05:59:00 executing program 3: 05:59:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1}, 0x0) 05:59:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0xfea1}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 05:59:00 executing program 3: 05:59:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1}, 0x0) 05:59:00 executing program 3: 05:59:00 executing program 3: 05:59:00 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:00 executing program 0: 05:59:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1}, 0x0) 05:59:00 executing program 5: 05:59:00 executing program 3: 05:59:00 executing program 3: 05:59:00 executing program 5: 05:59:00 executing program 0: 05:59:01 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) 05:59:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e2800", 0x26}], 0x1}, 0x0) 05:59:01 executing program 3: 05:59:01 executing program 5: [ 219.628303][ T8676] syz-executor.2 (8676) used greatest stack depth: 23368 bytes left 05:59:01 executing program 5: 05:59:01 executing program 0: 05:59:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e2800", 0x26}], 0x1}, 0x0) 05:59:01 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:01 executing program 3: 05:59:01 executing program 0: 05:59:01 executing program 5: 05:59:01 executing program 3: 05:59:02 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) 05:59:02 executing program 0: 05:59:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e2800", 0x26}], 0x1}, 0x0) 05:59:02 executing program 5: 05:59:02 executing program 3: 05:59:02 executing program 5: 05:59:02 executing program 3: 05:59:02 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 05:59:02 executing program 0: 05:59:02 executing program 5: 05:59:02 executing program 3: 05:59:02 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x2) 05:59:02 executing program 3: 05:59:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 05:59:02 executing program 0: 05:59:02 executing program 5: 05:59:02 executing program 3: 05:59:02 executing program 0: 05:59:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 05:59:03 executing program 5: 05:59:03 executing program 3: 05:59:03 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:03 executing program 0: 05:59:03 executing program 3: 05:59:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 05:59:03 executing program 5: 05:59:03 executing program 0: 05:59:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 05:59:03 executing program 3: 05:59:03 executing program 5: 05:59:03 executing program 0: 05:59:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 05:59:04 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:04 executing program 5: 05:59:04 executing program 3: 05:59:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 05:59:04 executing program 0: 05:59:04 executing program 5: 05:59:04 executing program 3: 05:59:04 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:04 executing program 0: 05:59:04 executing program 3: 05:59:04 executing program 5: 05:59:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 05:59:04 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:04 executing program 3: 05:59:04 executing program 5: 05:59:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 05:59:05 executing program 0: 05:59:05 executing program 5: 05:59:05 executing program 3: 05:59:05 executing program 5: 05:59:05 executing program 3: 05:59:05 executing program 0: 05:59:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 05:59:05 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:05 executing program 0: 05:59:05 executing program 3: 05:59:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:05 executing program 5: 05:59:05 executing program 3: 05:59:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 05:59:05 executing program 0: 05:59:05 executing program 5: 05:59:05 executing program 0: 05:59:05 executing program 3: 05:59:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 05:59:06 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:06 executing program 5: 05:59:06 executing program 0: 05:59:06 executing program 3: 05:59:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 05:59:06 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:06 executing program 3: 05:59:06 executing program 5: 05:59:06 executing program 0: 05:59:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 05:59:06 executing program 3: 05:59:06 executing program 5: 05:59:07 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:07 executing program 0: 05:59:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 05:59:07 executing program 5: 05:59:07 executing program 3: 05:59:07 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:07 executing program 0: 05:59:07 executing program 3: 05:59:07 executing program 5: 05:59:07 executing program 4: 05:59:07 executing program 0: 05:59:07 executing program 4: 05:59:08 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:08 executing program 5: 05:59:08 executing program 3: 05:59:08 executing program 0: 05:59:08 executing program 4: 05:59:08 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:08 executing program 4: 05:59:08 executing program 5: 05:59:08 executing program 3: 05:59:08 executing program 0: 05:59:08 executing program 5: 05:59:08 executing program 4: 05:59:09 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:09 executing program 3: 05:59:09 executing program 0: 05:59:09 executing program 5: 05:59:09 executing program 4: 05:59:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:09 executing program 5: 05:59:09 executing program 0: 05:59:09 executing program 3: 05:59:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:09 executing program 4: 05:59:09 executing program 0: 05:59:09 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:09 executing program 5: 05:59:09 executing program 4: 05:59:09 executing program 3: 05:59:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:09 executing program 0: 05:59:09 executing program 5: 05:59:09 executing program 4: 05:59:09 executing program 3: 05:59:09 executing program 0: 05:59:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:09 executing program 5: 05:59:10 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:10 executing program 4: 05:59:10 executing program 3: 05:59:10 executing program 5: 05:59:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0xffffffffffffffff) getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000e00)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 05:59:10 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 05:59:10 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x1) flock(r0, 0x1) 05:59:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/233, 0x37c) getdents64(r0, 0x0, 0x0) 05:59:10 executing program 4: syslog(0x2, &(0x7f00000000c0)=""/147, 0x5c344f32) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 05:59:10 executing program 3: 05:59:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 05:59:10 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:10 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000001740)=[{&(0x7f0000000240)="89", 0x1}], 0x1, 0x200000) lseek(r1, 0x0, 0x4) 05:59:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x3c, &(0x7f0000000180)=""/60, 0x41100, 0x0, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x20, 0x6}, 0x8, 0x10, &(0x7f0000000200)={0xffffffffffffff01, 0x2, 0x5, 0x9}, 0x10}, 0x70) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffe65) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:59:10 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000280)="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", 0x566, 0xc001, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="f11d9485945530b02c13b63ecca90bcd5e45aae6c27dcfb60d8f3b82d09721908ec5fd0cd4fc40b461afc79758bb2ebb7ba7e67fc49a3d4bb896b2", 0x3b, 0x8000, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="14ee69dc0101000001000000", 0xc, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) [ 229.138609][ T9113] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 229.197449][ T9113] check_preemption_disabled: 1 callbacks suppressed [ 229.197477][ T9113] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/9113 [ 229.213992][ T9113] caller is ip6_finish_output+0x335/0xdc0 [ 229.219771][ T9113] CPU: 1 PID: 9113 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 229.228786][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.238850][ T9113] Call Trace: [ 229.242143][ T9113] dump_stack+0x172/0x1f0 [ 229.246521][ T9113] __this_cpu_preempt_check+0x246/0x270 [ 229.252078][ T9113] ip6_finish_output+0x335/0xdc0 [ 229.257031][ T9113] ip6_output+0x235/0x7f0 [ 229.261371][ T9113] ? ip6_finish_output+0xdc0/0xdc0 [ 229.266497][ T9113] ? ip6_fragment+0x3980/0x3980 [ 229.271377][ T9113] ip6_local_out+0xc4/0x1b0 [ 229.275898][ T9113] ip6_send_skb+0xbb/0x350 [ 229.280329][ T9113] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 229.285807][ T9113] udp_v6_push_pending_frames+0x295/0x3b0 [ 229.291549][ T9113] ? udp_v6_send_skb.isra.0+0x14f0/0x14f0 [ 229.297297][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 229.302336][ T9113] udpv6_sendmsg+0x1b18/0x28d0 [ 229.307104][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 229.312139][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 229.318156][ T9113] ? aa_profile_af_perm+0x320/0x320 [ 229.323384][ T9113] ? __fget+0x35a/0x550 [ 229.327550][ T9113] ? find_held_lock+0x35/0x130 [ 229.332316][ T9113] ? __fget+0x35a/0x550 [ 229.336489][ T9113] ? lock_downgrade+0x880/0x880 [ 229.341357][ T9113] ? ___might_sleep+0x163/0x280 [ 229.346300][ T9113] ? __might_sleep+0x95/0x190 [ 229.350987][ T9113] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 229.356636][ T9113] ? aa_sk_perm+0x288/0x880 [ 229.361153][ T9113] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 229.366726][ T9113] inet_sendmsg+0x147/0x5e0 [ 229.371236][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 229.377217][ T9113] ? inet_sendmsg+0x147/0x5e0 [ 229.381903][ T9113] ? ipip_gro_receive+0x100/0x100 [ 229.386962][ T9113] sock_sendmsg+0xdd/0x130 [ 229.391393][ T9113] __sys_sendto+0x262/0x380 [ 229.395914][ T9113] ? __ia32_sys_getpeername+0xb0/0xb0 [ 229.401316][ T9113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.407560][ T9113] ? put_timespec64+0xda/0x140 [ 229.412330][ T9113] ? nsecs_to_jiffies+0x30/0x30 [ 229.417208][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.422674][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.428139][ T9113] ? do_syscall_64+0x26/0x610 [ 229.433014][ T9113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.439103][ T9113] __x64_sys_sendto+0xe1/0x1a0 [ 229.443873][ T9113] do_syscall_64+0x103/0x610 [ 229.448474][ T9113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.454367][ T9113] RIP: 0033:0x4582b9 [ 229.458264][ T9113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.477873][ T9113] RSP: 002b:00007f11992ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.487010][ T9113] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 05:59:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0xffffffffffffffff) getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000e00)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 229.494981][ T9113] RDX: 000000000000000c RSI: 0000000020000100 RDI: 0000000000000006 [ 229.502959][ T9113] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 229.510932][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11993006d4 [ 229.510941][ T9113] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 229.568649][ T9113] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/9113 [ 229.578221][ T9113] caller is ip6_fragment+0x100/0x3980 [ 229.583605][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 229.592624][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.602676][ T9113] Call Trace: [ 229.605977][ T9113] dump_stack+0x172/0x1f0 [ 229.610320][ T9113] __this_cpu_preempt_check+0x246/0x270 [ 229.615874][ T9113] ip6_fragment+0x100/0x3980 [ 229.620468][ T9113] ? ip6_mtu+0x2e6/0x460 [ 229.624714][ T9113] ? find_held_lock+0x35/0x130 [ 229.629481][ T9113] ? ip6_forward_finish+0x580/0x580 [ 229.629510][ T9113] ? ip6_forward+0x3880/0x3880 [ 229.629536][ T9113] ip6_finish_output+0x8a3/0xdc0 [ 229.629557][ T9113] ip6_output+0x235/0x7f0 [ 229.629580][ T9113] ? ip6_finish_output+0xdc0/0xdc0 [ 229.648754][ T9113] ? ip6_fragment+0x3980/0x3980 [ 229.648780][ T9113] ip6_local_out+0xc4/0x1b0 [ 229.648798][ T9113] ip6_send_skb+0xbb/0x350 [ 229.648818][ T9113] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 229.648842][ T9113] udp_v6_push_pending_frames+0x295/0x3b0 [ 229.678810][ T9113] ? udp_v6_send_skb.isra.0+0x14f0/0x14f0 [ 229.684549][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 229.689584][ T9113] udpv6_sendmsg+0x1b18/0x28d0 [ 229.694350][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 229.699389][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 229.705389][ T9113] ? aa_profile_af_perm+0x320/0x320 [ 229.710604][ T9113] ? __fget+0x35a/0x550 [ 229.714767][ T9113] ? find_held_lock+0x35/0x130 [ 229.719538][ T9113] ? __fget+0x35a/0x550 [ 229.723710][ T9113] ? lock_downgrade+0x880/0x880 [ 229.728573][ T9113] ? ___might_sleep+0x163/0x280 [ 229.733434][ T9113] ? __might_sleep+0x95/0x190 [ 229.738117][ T9113] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 229.743752][ T9113] ? aa_sk_perm+0x288/0x880 [ 229.748273][ T9113] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 229.753828][ T9113] inet_sendmsg+0x147/0x5e0 [ 229.759829][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 229.765819][ T9113] ? inet_sendmsg+0x147/0x5e0 [ 229.770510][ T9113] ? ipip_gro_receive+0x100/0x100 [ 229.775550][ T9113] sock_sendmsg+0xdd/0x130 [ 229.779984][ T9113] __sys_sendto+0x262/0x380 [ 229.784497][ T9113] ? __ia32_sys_getpeername+0xb0/0xb0 [ 229.789896][ T9113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 229.796139][ T9113] ? put_timespec64+0xda/0x140 [ 229.800902][ T9113] ? nsecs_to_jiffies+0x30/0x30 [ 229.805778][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.811245][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.816712][ T9113] ? do_syscall_64+0x26/0x610 [ 229.821402][ T9113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.827476][ T9113] __x64_sys_sendto+0xe1/0x1a0 [ 229.832254][ T9113] do_syscall_64+0x103/0x610 [ 229.836863][ T9113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.842753][ T9113] RIP: 0033:0x4582b9 [ 229.846656][ T9113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 229.866263][ T9113] RSP: 002b:00007f11992ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.874681][ T9113] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 229.882777][ T9113] RDX: 000000000000000c RSI: 0000000020000100 RDI: 0000000000000006 [ 229.890754][ T9113] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 229.898727][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11993006d4 [ 229.898737][ T9113] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 229.898837][ T9113] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/9113 [ 229.898857][ T9113] caller is ip6_fragment+0x244/0x3980 [ 229.898872][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 229.898880][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.898885][ T9113] Call Trace: [ 229.898902][ T9113] dump_stack+0x172/0x1f0 [ 229.898923][ T9113] __this_cpu_preempt_check+0x246/0x270 [ 229.898939][ T9113] ip6_fragment+0x244/0x3980 [ 229.898952][ T9113] ? ip6_mtu+0x2e6/0x460 [ 229.898967][ T9113] ? find_held_lock+0x35/0x130 [ 229.898983][ T9113] ? ip6_forward_finish+0x580/0x580 [ 229.899008][ T9113] ? ip6_forward+0x3880/0x3880 [ 229.899032][ T9113] ip6_finish_output+0x8a3/0xdc0 [ 229.899053][ T9113] ip6_output+0x235/0x7f0 [ 229.899071][ T9113] ? ip6_finish_output+0xdc0/0xdc0 [ 229.899090][ T9113] ? ip6_fragment+0x3980/0x3980 [ 229.899115][ T9113] ip6_local_out+0xc4/0x1b0 [ 229.899134][ T9113] ip6_send_skb+0xbb/0x350 [ 229.899158][ T9113] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 229.899191][ T9113] udp_v6_push_pending_frames+0x295/0x3b0 [ 229.899207][ T9113] ? udp_v6_send_skb.isra.0+0x14f0/0x14f0 [ 229.929976][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 229.929999][ T9113] udpv6_sendmsg+0x1b18/0x28d0 [ 229.930016][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 229.930038][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 229.930060][ T9113] ? aa_profile_af_perm+0x320/0x320 [ 229.930076][ T9113] ? __fget+0x35a/0x550 [ 229.930092][ T9113] ? find_held_lock+0x35/0x130 [ 229.930107][ T9113] ? __fget+0x35a/0x550 [ 229.930128][ T9113] ? lock_downgrade+0x880/0x880 [ 230.074497][ T9113] ? ___might_sleep+0x163/0x280 [ 230.079379][ T9113] ? __might_sleep+0x95/0x190 [ 230.084068][ T9113] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 230.089706][ T9113] ? aa_sk_perm+0x288/0x880 [ 230.094229][ T9113] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 230.099785][ T9113] inet_sendmsg+0x147/0x5e0 [ 230.104296][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 230.110272][ T9113] ? inet_sendmsg+0x147/0x5e0 [ 230.114952][ T9113] ? ipip_gro_receive+0x100/0x100 [ 230.119982][ T9113] sock_sendmsg+0xdd/0x130 [ 230.124413][ T9113] __sys_sendto+0x262/0x380 [ 230.128928][ T9113] ? __ia32_sys_getpeername+0xb0/0xb0 [ 230.134321][ T9113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.140560][ T9113] ? put_timespec64+0xda/0x140 [ 230.145324][ T9113] ? nsecs_to_jiffies+0x30/0x30 [ 230.150200][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 230.155663][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 230.161122][ T9113] ? do_syscall_64+0x26/0x610 [ 230.165798][ T9113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.171870][ T9113] __x64_sys_sendto+0xe1/0x1a0 [ 230.176641][ T9113] do_syscall_64+0x103/0x610 [ 230.181237][ T9113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.187130][ T9113] RIP: 0033:0x4582b9 [ 230.191028][ T9113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.210634][ T9113] RSP: 002b:00007f11992ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.219046][ T9113] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 230.227012][ T9113] RDX: 000000000000000c RSI: 0000000020000100 RDI: 0000000000000006 [ 230.234983][ T9113] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.242956][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11993006d4 [ 230.250927][ T9113] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 230.269217][ T9113] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/9113 [ 230.278671][ T9113] caller is sk_mc_loop+0x1d/0x210 [ 230.283728][ T9113] CPU: 0 PID: 9113 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 230.292736][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.292742][ T9113] Call Trace: [ 230.292762][ T9113] dump_stack+0x172/0x1f0 [ 230.292785][ T9113] __this_cpu_preempt_check+0x246/0x270 [ 230.292801][ T9113] sk_mc_loop+0x1d/0x210 [ 230.292821][ T9113] ip6_finish_output2+0x17a5/0x2550 [ 230.292845][ T9113] ? ip6_forward_finish+0x580/0x580 [ 230.292866][ T9113] ? ip6_copy_metadata+0x809/0xc30 [ 230.335746][ T9113] ? ip6_sk_dst_lookup_flow+0xb90/0xb90 [ 230.341306][ T9113] ip6_fragment+0x2bd1/0x3980 [ 230.345985][ T9113] ? ip6_forward_finish+0x580/0x580 [ 230.351191][ T9113] ? ip6_fragment+0x2bd1/0x3980 [ 230.356048][ T9113] ? ip6_mtu+0x2e6/0x460 [ 230.360299][ T9113] ? ip6_forward_finish+0x580/0x580 [ 230.365517][ T9113] ? ip6_forward+0x3880/0x3880 [ 230.370296][ T9113] ip6_finish_output+0x8a3/0xdc0 [ 230.375237][ T9113] ip6_output+0x235/0x7f0 [ 230.379603][ T9113] ? ip6_finish_output+0xdc0/0xdc0 [ 230.384723][ T9113] ? ip6_fragment+0x3980/0x3980 [ 230.389580][ T9113] ip6_local_out+0xc4/0x1b0 [ 230.394090][ T9113] ip6_send_skb+0xbb/0x350 [ 230.398509][ T9113] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 230.403976][ T9113] udp_v6_push_pending_frames+0x295/0x3b0 [ 230.409697][ T9113] ? udp_v6_send_skb.isra.0+0x14f0/0x14f0 [ 230.415426][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 230.420469][ T9113] udpv6_sendmsg+0x1b18/0x28d0 [ 230.425233][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 230.430262][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 230.436248][ T9113] ? aa_profile_af_perm+0x320/0x320 [ 230.441443][ T9113] ? __fget+0x35a/0x550 [ 230.445601][ T9113] ? find_held_lock+0x35/0x130 [ 230.450359][ T9113] ? __fget+0x35a/0x550 [ 230.454520][ T9113] ? lock_downgrade+0x880/0x880 [ 230.459374][ T9113] ? ___might_sleep+0x163/0x280 [ 230.464225][ T9113] ? __might_sleep+0x95/0x190 [ 230.468900][ T9113] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 230.474527][ T9113] ? aa_sk_perm+0x288/0x880 [ 230.479035][ T9113] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 230.484579][ T9113] inet_sendmsg+0x147/0x5e0 [ 230.489080][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 230.495048][ T9113] ? inet_sendmsg+0x147/0x5e0 [ 230.499718][ T9113] ? ipip_gro_receive+0x100/0x100 [ 230.504740][ T9113] sock_sendmsg+0xdd/0x130 [ 230.509155][ T9113] __sys_sendto+0x262/0x380 [ 230.513663][ T9113] ? __ia32_sys_getpeername+0xb0/0xb0 [ 230.519046][ T9113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.525277][ T9113] ? put_timespec64+0xda/0x140 [ 230.530036][ T9113] ? nsecs_to_jiffies+0x30/0x30 [ 230.534889][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 230.540347][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 230.545800][ T9113] ? do_syscall_64+0x26/0x610 [ 230.550491][ T9113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.556557][ T9113] __x64_sys_sendto+0xe1/0x1a0 [ 230.561320][ T9113] do_syscall_64+0x103/0x610 [ 230.565907][ T9113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.571792][ T9113] RIP: 0033:0x4582b9 [ 230.575681][ T9113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.595279][ T9113] RSP: 002b:00007f11992ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.603684][ T9113] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 230.611647][ T9113] RDX: 000000000000000c RSI: 0000000020000100 RDI: 0000000000000006 [ 230.619612][ T9113] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.627599][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11993006d4 [ 230.635562][ T9113] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 230.686990][ T9113] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/9113 [ 230.696420][ T9113] caller is sk_mc_loop+0x1d/0x210 [ 230.701553][ T9113] CPU: 1 PID: 9113 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 230.710571][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.720623][ T9113] Call Trace: [ 230.723929][ T9113] dump_stack+0x172/0x1f0 [ 230.728278][ T9113] __this_cpu_preempt_check+0x246/0x270 [ 230.733830][ T9113] sk_mc_loop+0x1d/0x210 [ 230.738080][ T9113] ip6_finish_output2+0x17a5/0x2550 [ 230.743291][ T9113] ? ip6_forward_finish+0x580/0x580 [ 230.748498][ T9113] ? ip6_copy_metadata+0x809/0xc30 [ 230.753630][ T9113] ? netif_rx_ni+0x620/0x620 [ 230.764566][ T9113] ? ip6_sk_dst_lookup_flow+0xb90/0xb90 [ 230.774910][ T9113] ip6_fragment+0x2bd1/0x3980 [ 230.779604][ T9113] ? ip6_forward_finish+0x580/0x580 [ 230.784811][ T9113] ? ip6_fragment+0x2bd1/0x3980 [ 230.789682][ T9113] ? ip6_mtu+0x2e6/0x460 [ 230.793941][ T9113] ? ip6_forward_finish+0x580/0x580 [ 230.799162][ T9113] ? ip6_forward+0x3880/0x3880 [ 230.803950][ T9113] ip6_finish_output+0x8a3/0xdc0 [ 230.808898][ T9113] ip6_output+0x235/0x7f0 [ 230.808918][ T9113] ? ip6_finish_output+0xdc0/0xdc0 [ 230.808937][ T9113] ? ip6_fragment+0x3980/0x3980 [ 230.808959][ T9113] ip6_local_out+0xc4/0x1b0 [ 230.808978][ T9113] ip6_send_skb+0xbb/0x350 [ 230.808999][ T9113] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 230.809023][ T9113] udp_v6_push_pending_frames+0x295/0x3b0 [ 230.809038][ T9113] ? udp_v6_send_skb.isra.0+0x14f0/0x14f0 [ 230.809062][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 230.809083][ T9113] udpv6_sendmsg+0x1b18/0x28d0 [ 230.809098][ T9113] ? ip_reply_glue_bits+0xc0/0xc0 [ 230.809119][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 230.837718][ T9113] ? aa_profile_af_perm+0x320/0x320 [ 230.837735][ T9113] ? __fget+0x35a/0x550 [ 230.837751][ T9113] ? find_held_lock+0x35/0x130 [ 230.837765][ T9113] ? __fget+0x35a/0x550 [ 230.837795][ T9113] ? lock_downgrade+0x880/0x880 [ 230.849222][ T9113] ? ___might_sleep+0x163/0x280 [ 230.849241][ T9113] ? __might_sleep+0x95/0x190 [ 230.849259][ T9113] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 230.849271][ T9113] ? aa_sk_perm+0x288/0x880 [ 230.849294][ T9113] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 230.918657][ T9113] inet_sendmsg+0x147/0x5e0 [ 230.923141][ T9113] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 230.929098][ T9113] ? inet_sendmsg+0x147/0x5e0 [ 230.933761][ T9113] ? ipip_gro_receive+0x100/0x100 [ 230.938768][ T9113] sock_sendmsg+0xdd/0x130 [ 230.943193][ T9113] __sys_sendto+0x262/0x380 [ 230.947697][ T9113] ? __ia32_sys_getpeername+0xb0/0xb0 [ 230.953058][ T9113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.959278][ T9113] ? put_timespec64+0xda/0x140 [ 230.964021][ T9113] ? nsecs_to_jiffies+0x30/0x30 [ 230.968875][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 230.974325][ T9113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 230.979762][ T9113] ? do_syscall_64+0x26/0x610 [ 230.984422][ T9113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.990469][ T9113] __x64_sys_sendto+0xe1/0x1a0 [ 230.995221][ T9113] do_syscall_64+0x103/0x610 [ 230.999817][ T9113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.005693][ T9113] RIP: 0033:0x4582b9 [ 231.009582][ T9113] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.029161][ T9113] RSP: 002b:00007f11992ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.037560][ T9113] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 231.045510][ T9113] RDX: 000000000000000c RSI: 0000000020000100 RDI: 0000000000000006 [ 231.053490][ T9113] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 231.061454][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11993006d4 [ 231.069408][ T9113] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff 05:59:12 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, 0x0}}], 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x40000000000034b, 0x0) 05:59:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0xffffffffffffffff) getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000e00)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 05:59:12 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:12 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) 05:59:12 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000900)={@loopback, 0x76}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4004010) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x8001, 0x100000001, 0x400, 0x0, 0x0, 0x10000, 0xa000, 0x2, 0x5, 0x5, 0xc457, 0x401, 0x17b0, 0x5, 0x4, 0xec02, 0x100, 0x0, 0x13e, 0x0, 0x9, 0x9, 0x0, 0x0, 0x9, 0x2, 0x1, 0x6, 0x0, 0x8, 0x8ca6, 0x0, 0x800, 0xfffffffffffffffe, 0x8, 0x80, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2020, 0xfff, 0x400, 0x2, 0xffffffff, 0x8, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000200)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 231.146728][ T9138] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.167029][ T9144] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/9144 [ 231.176466][ T9144] caller is ip6_finish_output+0x335/0xdc0 [ 231.182291][ T9144] CPU: 1 PID: 9144 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 231.191311][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.201368][ T9144] Call Trace: [ 231.204676][ T9144] dump_stack+0x172/0x1f0 [ 231.209030][ T9144] __this_cpu_preempt_check+0x246/0x270 [ 231.214595][ T9144] ip6_finish_output+0x335/0xdc0 [ 231.219552][ T9144] ip6_output+0x235/0x7f0 [ 231.223891][ T9144] ? ip6_finish_output+0xdc0/0xdc0 [ 231.229038][ T9144] ? ip6_fragment+0x3980/0x3980 [ 231.233904][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 231.238946][ T9144] ip6_local_out+0xc4/0x1b0 [ 231.243460][ T9144] ip6_send_skb+0xbb/0x350 [ 231.247888][ T9144] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 231.253371][ T9144] udpv6_sendmsg+0x21e3/0x28d0 [ 231.258141][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 231.263196][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 231.269200][ T9144] ? aa_profile_af_perm+0x320/0x320 [ 231.274416][ T9144] ? __might_fault+0x12b/0x1e0 [ 231.279194][ T9144] ? find_held_lock+0x35/0x130 [ 231.283968][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.290236][ T9144] ? rw_copy_check_uvector+0x2a6/0x330 [ 231.295749][ T9144] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 231.301310][ T9144] inet_sendmsg+0x147/0x5e0 [ 231.305822][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 231.311803][ T9144] ? inet_sendmsg+0x147/0x5e0 [ 231.316484][ T9144] ? ipip_gro_receive+0x100/0x100 [ 231.321516][ T9144] sock_sendmsg+0xdd/0x130 [ 231.325944][ T9144] ___sys_sendmsg+0x3e2/0x930 [ 231.330632][ T9144] ? copy_msghdr_from_user+0x430/0x430 [ 231.336107][ T9144] ? lock_downgrade+0x880/0x880 [ 231.340962][ T9144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.340984][ T9144] ? kasan_check_read+0x11/0x20 [ 231.341004][ T9144] ? __fget+0x381/0x550 [ 231.341025][ T9144] ? ksys_dup3+0x3e0/0x3e0 [ 231.341051][ T9144] ? __fget_light+0x1a9/0x230 [ 231.341067][ T9144] ? __fdget+0x1b/0x20 [ 231.341084][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.341100][ T9144] ? sockfd_lookup_light+0xcb/0x180 [ 231.341121][ T9144] __sys_sendmmsg+0x1bf/0x4d0 [ 231.341140][ T9144] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 231.390704][ T9144] ? _copy_to_user+0xc9/0x120 [ 231.395430][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.401686][ T9144] ? put_timespec64+0xda/0x140 [ 231.406466][ T9144] ? nsecs_to_jiffies+0x30/0x30 [ 231.411335][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 231.416804][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 231.422270][ T9144] ? do_syscall_64+0x26/0x610 [ 231.426984][ T9144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.433060][ T9144] ? do_syscall_64+0x26/0x610 [ 231.437748][ T9144] __x64_sys_sendmmsg+0x9d/0x100 [ 231.442697][ T9144] do_syscall_64+0x103/0x610 [ 231.447483][ T9144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.453381][ T9144] RIP: 0033:0x4582b9 [ 231.457284][ T9144] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.476931][ T9144] RSP: 002b:00007fd404b37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 231.485386][ T9144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 [ 231.493365][ T9144] RDX: 040000000000034b RSI: 0000000020007e00 RDI: 0000000000000003 [ 231.493374][ T9144] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 231.493382][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd404b386d4 [ 231.493390][ T9144] R13: 00000000004c5230 R14: 00000000004d9380 R15: 00000000ffffffff [ 231.504722][ T9138] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 05:59:13 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) [ 231.551559][ T9138] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.561835][ T9156] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.589883][ T9144] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/9144 [ 231.599539][ T9144] caller is ip6_finish_output+0x335/0xdc0 [ 231.605275][ T9144] CPU: 1 PID: 9144 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 231.614292][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.614299][ T9144] Call Trace: [ 231.614322][ T9144] dump_stack+0x172/0x1f0 [ 231.614345][ T9144] __this_cpu_preempt_check+0x246/0x270 [ 231.614365][ T9144] ip6_finish_output+0x335/0xdc0 [ 231.614390][ T9144] ip6_output+0x235/0x7f0 [ 231.646853][ T9144] ? ip6_finish_output+0xdc0/0xdc0 [ 231.651984][ T9144] ? ip6_fragment+0x3980/0x3980 [ 231.657625][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 231.662662][ T9144] ip6_local_out+0xc4/0x1b0 [ 231.667188][ T9144] ip6_send_skb+0xbb/0x350 [ 231.671618][ T9144] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 231.677098][ T9144] udpv6_sendmsg+0x21e3/0x28d0 [ 231.681885][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 231.686946][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 231.692978][ T9144] ? aa_profile_af_perm+0x320/0x320 [ 231.698204][ T9144] ? __might_fault+0x12b/0x1e0 [ 231.702984][ T9144] ? find_held_lock+0x35/0x130 [ 231.707791][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.714049][ T9144] ? rw_copy_check_uvector+0x2a6/0x330 [ 231.714100][ T9144] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 231.714122][ T9144] inet_sendmsg+0x147/0x5e0 [ 231.729646][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 231.735642][ T9144] ? inet_sendmsg+0x147/0x5e0 [ 231.740333][ T9144] ? ipip_gro_receive+0x100/0x100 [ 231.740355][ T9144] sock_sendmsg+0xdd/0x130 05:59:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001}, 0x30b) [ 231.740377][ T9144] ___sys_sendmsg+0x3e2/0x930 [ 231.754504][ T9144] ? copy_msghdr_from_user+0x430/0x430 [ 231.760677][ T9144] ? __lock_acquire+0x548/0x3fb0 [ 231.765624][ T9144] ? lock_downgrade+0x880/0x880 [ 231.765640][ T9144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.765662][ T9144] ? kasan_check_read+0x11/0x20 [ 231.765683][ T9144] ? __might_fault+0x12b/0x1e0 [ 231.765698][ T9144] ? find_held_lock+0x35/0x130 [ 231.765711][ T9144] ? __might_fault+0x12b/0x1e0 [ 231.765733][ T9144] ? lock_downgrade+0x880/0x880 [ 231.765768][ T9144] ? ___might_sleep+0x163/0x280 [ 231.800826][ T9144] __sys_sendmmsg+0x1bf/0x4d0 [ 231.800848][ T9144] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 231.800873][ T9144] ? _copy_to_user+0xc9/0x120 [ 231.820122][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.826379][ T9144] ? put_timespec64+0xda/0x140 [ 231.826393][ T9144] ? nsecs_to_jiffies+0x30/0x30 [ 231.826417][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 231.826432][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 231.826448][ T9144] ? do_syscall_64+0x26/0x610 [ 231.826464][ T9144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.826478][ T9144] ? do_syscall_64+0x26/0x610 [ 231.826496][ T9144] __x64_sys_sendmmsg+0x9d/0x100 [ 231.826519][ T9144] do_syscall_64+0x103/0x610 [ 231.862449][ T9144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.862462][ T9144] RIP: 0033:0x4582b9 [ 231.862479][ T9144] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.862488][ T9144] RSP: 002b:00007fd404b37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 231.862503][ T9144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 [ 231.862511][ T9144] RDX: 040000000000034b RSI: 0000000020007e00 RDI: 0000000000000003 [ 231.862520][ T9144] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 231.862529][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd404b386d4 [ 231.862538][ T9144] R13: 00000000004c5230 R14: 00000000004d9380 R15: 00000000ffffffff 05:59:13 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 231.868334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 231.882832][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 231.909786][ T9161] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 231.977270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 231.983082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 232.037889][ T9144] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/9144 [ 232.047473][ T9144] caller is ip6_finish_output+0x335/0xdc0 [ 232.053219][ T9144] CPU: 0 PID: 9144 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 232.059419][ T9161] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 232.062233][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.062240][ T9144] Call Trace: [ 232.062265][ T9144] dump_stack+0x172/0x1f0 [ 232.062291][ T9144] __this_cpu_preempt_check+0x246/0x270 [ 232.094663][ T9144] ip6_finish_output+0x335/0xdc0 [ 232.099614][ T9144] ip6_output+0x235/0x7f0 [ 232.103955][ T9144] ? ip6_finish_output+0xdc0/0xdc0 [ 232.109073][ T9144] ? ip6_fragment+0x3980/0x3980 [ 232.113923][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 232.118953][ T9144] ip6_local_out+0xc4/0x1b0 [ 232.123460][ T9144] ip6_send_skb+0xbb/0x350 [ 232.127881][ T9144] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 232.133348][ T9144] udpv6_sendmsg+0x21e3/0x28d0 [ 232.137300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 232.138113][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 232.143905][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 232.148833][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 232.148855][ T9144] ? aa_profile_af_perm+0x320/0x320 [ 232.148870][ T9144] ? __might_fault+0x12b/0x1e0 [ 232.148885][ T9144] ? find_held_lock+0x35/0x130 [ 232.148911][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.181548][ T9144] ? rw_copy_check_uvector+0x2a6/0x330 [ 232.187039][ T9144] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 232.192588][ T9144] inet_sendmsg+0x147/0x5e0 [ 232.197091][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 232.203069][ T9144] ? inet_sendmsg+0x147/0x5e0 [ 232.207744][ T9144] ? ipip_gro_receive+0x100/0x100 [ 232.212768][ T9144] sock_sendmsg+0xdd/0x130 [ 232.217193][ T9144] ___sys_sendmsg+0x3e2/0x930 [ 232.221877][ T9144] ? copy_msghdr_from_user+0x430/0x430 [ 232.227339][ T9144] ? __lock_acquire+0x548/0x3fb0 [ 232.232274][ T9144] ? lock_downgrade+0x880/0x880 [ 232.237120][ T9144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.243366][ T9144] ? kasan_check_read+0x11/0x20 [ 232.248228][ T9144] ? __might_fault+0x12b/0x1e0 [ 232.252995][ T9144] ? find_held_lock+0x35/0x130 [ 232.257756][ T9144] ? __might_fault+0x12b/0x1e0 [ 232.262526][ T9144] ? lock_downgrade+0x880/0x880 [ 232.267388][ T9144] ? ___might_sleep+0x163/0x280 [ 232.272245][ T9144] __sys_sendmmsg+0x1bf/0x4d0 [ 232.276923][ T9144] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 232.281967][ T9144] ? _copy_to_user+0xc9/0x120 [ 232.286667][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.292905][ T9144] ? put_timespec64+0xda/0x140 [ 232.297668][ T9144] ? nsecs_to_jiffies+0x30/0x30 [ 232.302524][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.307979][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.313436][ T9144] ? do_syscall_64+0x26/0x610 [ 232.318111][ T9144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.324171][ T9144] ? do_syscall_64+0x26/0x610 [ 232.328859][ T9144] __x64_sys_sendmmsg+0x9d/0x100 [ 232.333800][ T9144] do_syscall_64+0x103/0x610 [ 232.338401][ T9144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.344290][ T9144] RIP: 0033:0x4582b9 [ 232.348295][ T9144] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.367900][ T9144] RSP: 002b:00007fd404b37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.376320][ T9144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 05:59:14 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) [ 232.384293][ T9144] RDX: 040000000000034b RSI: 0000000020007e00 RDI: 0000000000000003 [ 232.392283][ T9144] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 232.400254][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd404b386d4 [ 232.408227][ T9144] R13: 00000000004c5230 R14: 00000000004d9380 R15: 00000000ffffffff [ 232.459594][ T9173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 232.468103][ T9144] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/9144 [ 232.478477][ T9144] caller is ip6_finish_output+0x335/0xdc0 [ 232.484223][ T9144] CPU: 0 PID: 9144 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 232.493239][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.493246][ T9144] Call Trace: [ 232.493271][ T9144] dump_stack+0x172/0x1f0 [ 232.493293][ T9144] __this_cpu_preempt_check+0x246/0x270 [ 232.493312][ T9144] ip6_finish_output+0x335/0xdc0 [ 232.493333][ T9144] ip6_output+0x235/0x7f0 [ 232.493356][ T9144] ? ip6_finish_output+0xdc0/0xdc0 [ 232.510864][ T9173] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 232.511057][ T9144] ? ip6_fragment+0x3980/0x3980 [ 232.525834][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 232.549963][ T9144] ip6_local_out+0xc4/0x1b0 [ 232.554481][ T9144] ip6_send_skb+0xbb/0x350 [ 232.558914][ T9144] udp_v6_send_skb.isra.0+0x839/0x14f0 [ 232.564400][ T9144] udpv6_sendmsg+0x21e3/0x28d0 [ 232.569169][ T9144] ? ip_reply_glue_bits+0xc0/0xc0 [ 232.569201][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 232.569223][ T9144] ? aa_profile_af_perm+0x320/0x320 [ 232.569244][ T9144] ? __might_fault+0x12b/0x1e0 [ 232.590198][ T9144] ? find_held_lock+0x35/0x130 [ 232.590219][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.590237][ T9144] ? rw_copy_check_uvector+0x2a6/0x330 [ 232.590281][ T9144] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 232.606697][ T9144] inet_sendmsg+0x147/0x5e0 [ 232.606716][ T9144] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 232.606728][ T9144] ? inet_sendmsg+0x147/0x5e0 [ 232.606741][ T9144] ? ipip_gro_receive+0x100/0x100 [ 232.606764][ T9144] sock_sendmsg+0xdd/0x130 [ 232.614313][ T9180] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/9180 [ 232.616807][ T9144] ___sys_sendmsg+0x3e2/0x930 [ 232.616827][ T9144] ? copy_msghdr_from_user+0x430/0x430 [ 232.616845][ T9144] ? __lock_acquire+0x548/0x3fb0 [ 232.616866][ T9144] ? lock_downgrade+0x880/0x880 [ 232.616881][ T9144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.623645][ T9180] caller is sk_mc_loop+0x1d/0x210 [ 232.627665][ T9144] ? kasan_check_read+0x11/0x20 [ 232.627686][ T9144] ? __might_fault+0x12b/0x1e0 [ 232.627709][ T9144] ? find_held_lock+0x35/0x130 [ 232.691814][ T9144] ? __might_fault+0x12b/0x1e0 [ 232.696595][ T9144] ? lock_downgrade+0x880/0x880 [ 232.701458][ T9144] ? ___might_sleep+0x163/0x280 [ 232.706320][ T9144] __sys_sendmmsg+0x1bf/0x4d0 [ 232.711002][ T9144] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 232.716087][ T9144] ? _copy_to_user+0xc9/0x120 [ 232.720769][ T9144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.727009][ T9144] ? put_timespec64+0xda/0x140 [ 232.731776][ T9144] ? nsecs_to_jiffies+0x30/0x30 [ 232.736637][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.742100][ T9144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.747559][ T9144] ? do_syscall_64+0x26/0x610 [ 232.752235][ T9144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.758590][ T9144] ? do_syscall_64+0x26/0x610 [ 232.763305][ T9144] __x64_sys_sendmmsg+0x9d/0x100 [ 232.774072][ T9144] do_syscall_64+0x103/0x610 [ 232.778670][ T9144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.784556][ T9144] RIP: 0033:0x4582b9 [ 232.788449][ T9144] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:59:14 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a52e) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:59:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000900)={@loopback, 0x76, r1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r4 = open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000200)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, 0x0) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 232.808053][ T9144] RSP: 002b:00007fd404b37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.816469][ T9144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004582b9 [ 232.824440][ T9144] RDX: 040000000000034b RSI: 0000000020007e00 RDI: 0000000000000003 [ 232.832415][ T9144] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 232.840388][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd404b386d4 [ 232.848831][ T9144] R13: 00000000004c5230 R14: 00000000004d9380 R15: 00000000ffffffff [ 232.856864][ T9180] CPU: 1 PID: 9180 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 232.865911][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.875973][ T9180] Call Trace: [ 232.879279][ T9180] dump_stack+0x172/0x1f0 [ 232.883632][ T9180] __this_cpu_preempt_check+0x246/0x270 [ 232.889210][ T9180] sk_mc_loop+0x1d/0x210 [ 232.894978][ T9180] ip_mc_output+0x2ef/0xf70 [ 232.899497][ T9180] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 232.904616][ T9180] ? __ip_make_skb+0xf15/0x1820 [ 232.904635][ T9180] ? ip_append_data.part.0+0x170/0x170 [ 232.904649][ T9180] ? dst_release+0x62/0xb0 [ 232.904665][ T9180] ? __ip_make_skb+0xf93/0x1820 [ 232.904683][ T9180] ip_local_out+0xc4/0x1b0 [ 232.904705][ T9180] ip_send_skb+0x42/0xf0 [ 232.928670][ T9180] ip_push_pending_frames+0x64/0x80 [ 232.928688][ T9180] raw_sendmsg+0x1e6d/0x2f20 [ 232.928714][ T9180] ? compat_raw_getsockopt+0x100/0x100 [ 232.928744][ T9180] ? finish_task_switch+0x146/0x780 [ 232.928769][ T9180] ? ___might_sleep+0x163/0x280 [ 232.938199][ T9180] ? __might_sleep+0x95/0x190 [ 232.938219][ T9180] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 232.938234][ T9180] ? aa_sk_perm+0x288/0x880 [ 232.938249][ T9180] ? _raw_spin_unlock_irq+0x5e/0x90 [ 232.938263][ T9180] ? finish_task_switch+0x146/0x780 [ 232.938284][ T9180] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 232.938303][ T9180] inet_sendmsg+0x147/0x5e0 [ 232.938317][ T9180] ? compat_raw_getsockopt+0x100/0x100 [ 232.938336][ T9180] ? inet_sendmsg+0x147/0x5e0 [ 232.948360][ T9180] ? ipip_gro_receive+0x100/0x100 [ 232.948379][ T9180] sock_sendmsg+0xdd/0x130 [ 232.948397][ T9180] kernel_sendmsg+0x44/0x50 [ 232.948415][ T9180] sock_no_sendpage+0x116/0x150 [ 232.948430][ T9180] ? sock_kfree_s+0x70/0x70 [ 232.948462][ T9180] inet_sendpage+0x44a/0x630 [ 232.963144][ T9180] kernel_sendpage+0x95/0xf0 [ 232.963157][ T9180] ? inet_sendmsg+0x5e0/0x5e0 [ 232.963187][ T9180] sock_sendpage+0x8b/0xc0 [ 232.973291][ T9180] ? pipe_lock+0x6e/0x80 [ 232.973325][ T9180] pipe_to_sendpage+0x299/0x370 [ 232.973342][ T9180] ? kernel_sendpage+0xf0/0xf0 [ 232.973359][ T9180] ? direct_splice_actor+0x1a0/0x1a0 [ 232.973377][ T9180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.973402][ T9180] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 232.983772][ T9180] __splice_from_pipe+0x395/0x7d0 [ 232.983789][ T9180] ? direct_splice_actor+0x1a0/0x1a0 [ 232.983811][ T9180] ? direct_splice_actor+0x1a0/0x1a0 [ 232.983826][ T9180] splice_from_pipe+0x108/0x170 [ 232.983845][ T9180] ? splice_shrink_spd+0xd0/0xd0 [ 232.993873][ T9180] ? apparmor_file_permission+0x25/0x30 [ 232.993891][ T9180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.993917][ T9180] ? security_file_permission+0x94/0x380 [ 232.993938][ T9180] generic_splice_sendpage+0x3c/0x50 [ 232.993953][ T9180] ? splice_from_pipe+0x170/0x170 [ 232.993972][ T9180] do_splice+0x70a/0x13c0 [ 233.004091][ T9180] ? opipe_prep.part.0+0x2d0/0x2d0 [ 233.004111][ T9180] ? __fget_light+0x1a9/0x230 [ 233.004131][ T9180] __x64_sys_splice+0x2c6/0x330 [ 233.004157][ T9180] do_syscall_64+0x103/0x610 05:59:14 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:14 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) 05:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x13012, r0, 0x0) 05:59:15 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 233.013586][ T9180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.013599][ T9180] RIP: 0033:0x4582b9 [ 233.013615][ T9180] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 233.013624][ T9180] RSP: 002b:00007f11992ffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 233.013638][ T9180] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 233.013653][ T9180] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 233.022977][ T9180] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 233.022987][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11993006d4 [ 233.022995][ T9180] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 233.206203][ T9186] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 233.258454][ T9190] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 05:59:15 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) close(r1) 05:59:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xfffffffffffffffb}, 0x14}}, 0x0) 05:59:15 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) close(r1) 05:59:15 executing program 4: mknod$loop(&(0x7f0000000040)='./bus\x00', 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000180)='sy\x81tem_}:object_\x04:}ount_tmp_t:s0\x00\xf90\xbf\xe3\x1b~!n\xcb6/\xae\xa7\xa8-H\xcf\x8e\x9d\x99\x04\f\xce\xcd\xa1\xb9\x95\xf1\x1a\xa7h\xa1 d\x95\xf8k\v\"\xaa\xb1hdWy\'_\fy\xa6%\xde\"\xc2\xaf\xc0]\xf3\x84,\xf8\xff\x0f<&I#snq\xfa\xb0\x01\x12\x9bL\xda\x17W\x00C\xdd?\x13\xddaD\x06\xa8m\xb9\xf4O\x10\xb1,\xbf\xcb\xf9\n\xfb\xd3', 0x87, 0x0) [ 233.657243][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 233.663151][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:59:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="181d000000000000000000000000000050000000000000009500000000000000b69203cf400c3dbdabdc40cbb83f9ecb3861f6dc1dfcefe00fe2f365f57fedbad8d03fa82aad63c6ee31bf197183d838a23600ac5e2009ddefbfd72df728aee66afe9690dff3"], 0x0, 0x2, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 05:59:15 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) close(r1) 05:59:15 executing program 3: r0 = memfd_create(&(0x7f0000000400)='queue1\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\xa9\x8b+\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xbf}, @connect}], 0xffffff76) 05:59:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x0, "b19ca256cabab125dfdda76c449f5d706f36f2c84f25dba11a4b5ac661e50690", 0x3, 0x5, 0x0, 0x0, 0x200}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) [ 233.978448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 233.984249][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:59:16 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xfffffffffffef, 0x13012, r1, 0x0) 05:59:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(0xffffffffffffffff) 05:59:16 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) 05:59:16 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x0, "b19ca256cabab125dfdda76c449f5d706f36f2c84f25dba11a4b5ac661e50690", 0x3, 0x5, 0x0, 0x0, 0x200}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) 05:59:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(0xffffffffffffffff) 05:59:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x0, "b19ca256cabab125dfdda76c449f5d706f36f2c84f25dba11a4b5ac661e50690", 0x3, 0x5, 0x0, 0x0, 0x200}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x30b) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) 05:59:16 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) 05:59:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(0xffffffffffffffff) 05:59:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000300)="e7", 0x0, 0x1}, 0x20) 05:59:16 executing program 5: socket(0x10, 0x2, 0xc) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 05:59:16 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:16 executing program 5: socket(0x10, 0x2, 0xc) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 05:59:16 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) move_pages(0x0, 0x312, &(0x7f00000000c0), 0x0, 0x0, 0x0) 05:59:16 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x22000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x2de52b06, {{0xa, 0x4e20, 0x204d7243, @loopback, 0x3}}}, 0x88) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x8000000080, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10002) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x1, 0x141000) write$binfmt_misc(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1008) ioctl$RTC_AIE_ON(r1, 0x7001) 05:59:16 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) 05:59:16 executing program 5: socket(0x10, 0x2, 0xc) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 05:59:16 executing program 5: write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 05:59:17 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 05:59:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c81, 0xfffffffffffffffe) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x802}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 05:59:17 executing program 5: write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 05:59:17 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:59:17 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:17 executing program 5: write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) [ 236.166297][ T9331] __nla_parse: 11 callbacks suppressed [ 236.166309][ T9331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 05:59:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff01e, 0x0, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000540)=[0x0]) 05:59:18 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a52e) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:59:18 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40481, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000004ca31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0xa0) 05:59:18 executing program 5: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) 05:59:18 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 05:59:18 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40481, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000004ca31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0xa0) 05:59:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffe}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xfffffffffffffe65) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 236.599202][ T9349] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 236.635220][ T9350] check_preemption_disabled: 56 callbacks suppressed 05:59:18 executing program 1: r0 = epoll_create1(0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) socket$unix(0x1, 0x2, 0x0) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@broadcast}}, {{}, 0x0, @in=@initdev}}, 0x0) getegid() stat(0x0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 236.635270][ T9350] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/9350 [ 236.651977][ T9350] caller is sk_mc_loop+0x1d/0x210 [ 236.657374][ T9350] CPU: 1 PID: 9350 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 236.666403][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.676462][ T9350] Call Trace: [ 236.679767][ T9350] dump_stack+0x172/0x1f0 [ 236.679796][ T9350] __this_cpu_preempt_check+0x246/0x270 [ 236.679818][ T9350] sk_mc_loop+0x1d/0x210 [ 236.689667][ T9350] ip_mc_output+0x2ef/0xf70 05:59:18 executing program 5: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) [ 236.689687][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 236.689706][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 236.689727][ T9350] ip_local_out+0xc4/0x1b0 [ 236.689747][ T9350] ip_send_skb+0x42/0xf0 [ 236.717290][ T9350] ip_push_pending_frames+0x64/0x80 [ 236.722496][ T9350] raw_sendmsg+0x1e6d/0x2f20 [ 236.727109][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 236.732582][ T9350] ? find_held_lock+0x35/0x130 [ 236.737355][ T9350] ? __lock_acquire+0x548/0x3fb0 [ 236.742317][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 236.747776][ T9350] ? lockdep_hardirqs_on+0x418/0x5d0 [ 236.747793][ T9350] ? retint_kernel+0x2d/0x2d [ 236.747819][ T9350] ? trace_hardirqs_on_caller+0x6a/0x220 [ 236.747834][ T9350] ? __might_sleep+0x95/0x190 [ 236.747853][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 236.747872][ T9350] ? retint_kernel+0x2d/0x2d [ 236.747892][ T9350] inet_sendmsg+0x147/0x5e0 [ 236.747914][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 236.747932][ T9350] ? inet_sendmsg+0x147/0x5e0 [ 236.773517][ T9350] ? ipip_gro_receive+0x100/0x100 05:59:18 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40481, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000004ca31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0xa0) [ 236.773538][ T9350] sock_sendmsg+0xdd/0x130 [ 236.773556][ T9350] kernel_sendmsg+0x44/0x50 [ 236.773576][ T9350] sock_no_sendpage+0x116/0x150 [ 236.811528][ T9350] ? sock_kfree_s+0x70/0x70 [ 236.816050][ T9350] ? mark_held_locks+0xa4/0xf0 [ 236.816069][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 236.816085][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 236.816104][ T9350] inet_sendpage+0x44a/0x630 [ 236.816125][ T9350] kernel_sendpage+0x95/0xf0 [ 236.841709][ T9350] ? inet_sendmsg+0x5e0/0x5e0 [ 236.846393][ T9350] sock_sendpage+0x8b/0xc0 [ 236.846414][ T9350] pipe_to_sendpage+0x299/0x370 [ 236.846431][ T9350] ? kernel_sendpage+0xf0/0xf0 [ 236.846447][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 236.846461][ T9350] ? splice_from_pipe_next.part.0+0x26c/0x2f0 [ 236.846482][ T9350] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 236.877855][ T9350] __splice_from_pipe+0x395/0x7d0 [ 236.882154][ T9359] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 236.882900][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 236.882923][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 236.903367][ T9350] splice_from_pipe+0x108/0x170 [ 236.908236][ T9350] ? splice_shrink_spd+0xd0/0xd0 [ 236.913201][ T9350] ? apparmor_file_permission+0x25/0x30 [ 236.918760][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.925009][ T9350] ? security_file_permission+0x94/0x380 [ 236.930657][ T9350] generic_splice_sendpage+0x3c/0x50 [ 236.935947][ T9350] ? splice_from_pipe+0x170/0x170 [ 236.940976][ T9350] do_splice+0x70a/0x13c0 [ 236.945324][ T9350] ? opipe_prep.part.0+0x2d0/0x2d0 05:59:18 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40481, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000004ca31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0xa0) [ 236.950448][ T9350] ? __fget_light+0x1a9/0x230 [ 236.955136][ T9350] __x64_sys_splice+0x2c6/0x330 [ 236.960003][ T9350] do_syscall_64+0x103/0x610 [ 236.964604][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.970496][ T9350] RIP: 0033:0x4582b9 [ 236.974397][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:59:18 executing program 5: r0 = socket(0x0, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r1) 05:59:18 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x494, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000015c0)={&(0x7f0000001580), 0x8}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00, 0x0, 0xca}]) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0xffffffff80000001, {0x54, 0x7, 0x7, {0x6}, {0x7fefc86f, 0x8001}, @ramp={0x0, 0x1, {0x7fff, 0x0, 0x2, 0xb3}}}, {0x0, 0x9, 0x0, {0x6, 0x7ff}, {0x8}, @ramp={0x5, 0x0, {0x0, 0x9, 0x6, 0x63b}}}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) [ 236.994008][ T9350] RSP: 002b:00007f9075ccdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 237.002429][ T9350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 237.010406][ T9350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.018434][ T9350] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 237.026413][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9075cce6d4 [ 237.034389][ T9350] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 237.085125][ T9374] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 237.251188][ T9350] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/9350 [ 237.261416][ T9350] caller is sk_mc_loop+0x1d/0x210 [ 237.266597][ T9350] CPU: 0 PID: 9350 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 237.275612][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.285665][ T9350] Call Trace: [ 237.288969][ T9350] dump_stack+0x172/0x1f0 [ 237.293319][ T9350] __this_cpu_preempt_check+0x246/0x270 [ 237.298872][ T9350] sk_mc_loop+0x1d/0x210 [ 237.303123][ T9350] ip_mc_output+0x2ef/0xf70 [ 237.307639][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 237.312756][ T9350] ? __ip_make_skb+0xf15/0x1820 [ 237.317616][ T9350] ? ip_append_data.part.0+0x170/0x170 [ 237.323076][ T9350] ? dst_release+0x62/0xb0 [ 237.327506][ T9350] ? __ip_make_skb+0xf93/0x1820 [ 237.332367][ T9350] ip_local_out+0xc4/0x1b0 [ 237.336804][ T9350] ip_send_skb+0x42/0xf0 [ 237.341058][ T9350] ip_push_pending_frames+0x64/0x80 [ 237.346263][ T9350] raw_sendmsg+0x1e6d/0x2f20 [ 237.350862][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 237.356323][ T9350] ? find_held_lock+0x35/0x130 [ 237.361089][ T9350] ? __lock_acquire+0x548/0x3fb0 [ 237.366035][ T9350] ? mark_held_locks+0xa4/0xf0 [ 237.370804][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.376267][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.381737][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.387221][ T9350] ? retint_kernel+0x2d/0x2d [ 237.391825][ T9350] ? security_socket_sendmsg+0x89/0xc0 [ 237.397282][ T9350] inet_sendmsg+0x147/0x5e0 [ 237.401765][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 237.407210][ T9350] ? inet_sendmsg+0x147/0x5e0 [ 237.411866][ T9350] ? ipip_gro_receive+0x100/0x100 [ 237.416871][ T9350] sock_sendmsg+0xdd/0x130 [ 237.421274][ T9350] kernel_sendmsg+0x44/0x50 [ 237.425767][ T9350] sock_no_sendpage+0x116/0x150 [ 237.430615][ T9350] ? sock_kfree_s+0x70/0x70 [ 237.435110][ T9350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.440569][ T9350] inet_sendpage+0x44a/0x630 [ 237.445159][ T9350] kernel_sendpage+0x95/0xf0 [ 237.449781][ T9350] ? inet_sendmsg+0x5e0/0x5e0 [ 237.454443][ T9350] sock_sendpage+0x8b/0xc0 [ 237.458841][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.465077][ T9350] pipe_to_sendpage+0x299/0x370 [ 237.469923][ T9350] ? kernel_sendpage+0xf0/0xf0 [ 237.474678][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 237.479945][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.486175][ T9350] ? anon_pipe_buf_release+0x1c6/0x270 [ 237.491625][ T9350] __splice_from_pipe+0x395/0x7d0 [ 237.496656][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 237.501969][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 237.507254][ T9350] splice_from_pipe+0x108/0x170 [ 237.512103][ T9350] ? splice_shrink_spd+0xd0/0xd0 [ 237.517075][ T9350] ? apparmor_file_permission+0x25/0x30 [ 237.522623][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.528865][ T9350] ? security_file_permission+0x94/0x380 [ 237.534499][ T9350] generic_splice_sendpage+0x3c/0x50 [ 237.539781][ T9350] ? splice_from_pipe+0x170/0x170 [ 237.544800][ T9350] do_splice+0x70a/0x13c0 [ 237.549137][ T9350] ? opipe_prep.part.0+0x2d0/0x2d0 [ 237.554250][ T9350] ? __fget_light+0x1a9/0x230 [ 237.558930][ T9350] __x64_sys_splice+0x2c6/0x330 [ 237.563785][ T9350] do_syscall_64+0x103/0x610 [ 237.568380][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.574269][ T9350] RIP: 0033:0x4582b9 [ 237.578160][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.597762][ T9350] RSP: 002b:00007f9075ccdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 237.606169][ T9350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 237.614148][ T9350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 237.622121][ T9350] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 237.630091][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9075cce6d4 [ 237.638060][ T9350] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 237.649125][ T9350] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/9350 [ 237.658550][ T9350] caller is sk_mc_loop+0x1d/0x210 [ 237.663575][ T9350] CPU: 0 PID: 9350 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 237.672583][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.682633][ T9350] Call Trace: [ 237.685910][ T9350] dump_stack+0x172/0x1f0 [ 237.690226][ T9350] __this_cpu_preempt_check+0x246/0x270 [ 237.695755][ T9350] sk_mc_loop+0x1d/0x210 [ 237.699996][ T9350] ip_mc_output+0x2ef/0xf70 [ 237.704485][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 237.709574][ T9350] ? __ip_make_skb+0xf15/0x1820 [ 237.714409][ T9350] ? ip_append_data.part.0+0x170/0x170 [ 237.719857][ T9350] ? dst_release+0x62/0xb0 [ 237.724276][ T9350] ? __ip_make_skb+0xf93/0x1820 [ 237.729120][ T9350] ip_local_out+0xc4/0x1b0 [ 237.733537][ T9350] ip_send_skb+0x42/0xf0 [ 237.737771][ T9350] ip_push_pending_frames+0x64/0x80 [ 237.742974][ T9350] raw_sendmsg+0x1e6d/0x2f20 [ 237.747579][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 237.753045][ T9350] ? find_held_lock+0x35/0x130 [ 237.757814][ T9350] ? __lock_acquire+0x548/0x3fb0 [ 237.764272][ T9350] ? ___might_sleep+0x163/0x280 [ 237.769130][ T9350] ? __might_sleep+0x95/0x190 [ 237.769149][ T9350] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 237.769170][ T9350] ? aa_sk_perm+0x288/0x880 [ 237.779463][ T9350] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 237.779482][ T9350] inet_sendmsg+0x147/0x5e0 [ 237.779496][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 237.779514][ T9350] ? inet_sendmsg+0x147/0x5e0 [ 237.804126][ T9350] ? ipip_gro_receive+0x100/0x100 [ 237.809161][ T9350] sock_sendmsg+0xdd/0x130 [ 237.813586][ T9350] kernel_sendmsg+0x44/0x50 [ 237.818070][ T9350] sock_no_sendpage+0x116/0x150 [ 237.822988][ T9350] ? sock_kfree_s+0x70/0x70 [ 237.827479][ T9350] ? debug_check_no_obj_freed+0x211/0x444 [ 237.833190][ T9350] ? mark_held_locks+0xa4/0xf0 [ 237.837937][ T9350] inet_sendpage+0x44a/0x630 [ 237.842510][ T9350] kernel_sendpage+0x95/0xf0 [ 237.847077][ T9350] ? inet_sendmsg+0x5e0/0x5e0 [ 237.851750][ T9350] sock_sendpage+0x8b/0xc0 [ 237.856161][ T9350] ? lockdep_hardirqs_on+0x418/0x5d0 [ 237.861434][ T9350] pipe_to_sendpage+0x299/0x370 [ 237.866366][ T9350] ? kernel_sendpage+0xf0/0xf0 [ 237.871111][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 237.876389][ T9350] ? __put_page+0x92/0xd0 [ 237.880707][ T9350] ? anon_pipe_buf_release+0x1c6/0x270 [ 237.886264][ T9350] __splice_from_pipe+0x395/0x7d0 [ 237.891288][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 237.896563][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 237.901830][ T9350] splice_from_pipe+0x108/0x170 [ 237.906664][ T9350] ? splice_shrink_spd+0xd0/0xd0 [ 237.911589][ T9350] ? apparmor_file_permission+0x25/0x30 [ 237.917112][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.923338][ T9350] ? security_file_permission+0x94/0x380 [ 237.928951][ T9350] generic_splice_sendpage+0x3c/0x50 [ 237.934230][ T9350] ? splice_from_pipe+0x170/0x170 [ 237.939239][ T9350] do_splice+0x70a/0x13c0 [ 237.943551][ T9350] ? opipe_prep.part.0+0x2d0/0x2d0 [ 237.948648][ T9350] ? __fget_light+0x1a9/0x230 [ 237.953310][ T9350] __x64_sys_splice+0x2c6/0x330 [ 237.958161][ T9350] do_syscall_64+0x103/0x610 [ 237.962766][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.968639][ T9350] RIP: 0033:0x4582b9 [ 237.972530][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.992148][ T9350] RSP: 002b:00007f9075ccdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 238.000543][ T9350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 238.008497][ T9350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 238.016459][ T9350] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 238.024409][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9075cce6d4 [ 238.032359][ T9350] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 238.041842][ T9350] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/9350 [ 238.051223][ T9350] caller is sk_mc_loop+0x1d/0x210 [ 238.056243][ T9350] CPU: 0 PID: 9350 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 238.065232][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.075262][ T9350] Call Trace: [ 238.078533][ T9350] dump_stack+0x172/0x1f0 [ 238.082857][ T9350] __this_cpu_preempt_check+0x246/0x270 [ 238.088382][ T9350] sk_mc_loop+0x1d/0x210 [ 238.092627][ T9350] ip_mc_output+0x2ef/0xf70 [ 238.097148][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 238.102278][ T9350] ? __ip_make_skb+0xf15/0x1820 [ 238.107112][ T9350] ? ip_append_data.part.0+0x170/0x170 [ 238.112556][ T9350] ? dst_release+0x62/0xb0 [ 238.116951][ T9350] ? __ip_make_skb+0xf93/0x1820 [ 238.121779][ T9350] ip_local_out+0xc4/0x1b0 [ 238.126202][ T9350] ip_send_skb+0x42/0xf0 [ 238.130427][ T9350] ip_push_pending_frames+0x64/0x80 [ 238.135620][ T9350] raw_sendmsg+0x1e6d/0x2f20 [ 238.140218][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 238.145672][ T9350] ? find_held_lock+0x35/0x130 [ 238.150430][ T9350] ? __lock_acquire+0x548/0x3fb0 [ 238.155356][ T9350] ? ___might_sleep+0x163/0x280 [ 238.160197][ T9350] ? __might_sleep+0x95/0x190 [ 238.164856][ T9350] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 238.170466][ T9350] ? aa_sk_perm+0x288/0x880 [ 238.174970][ T9350] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 238.180590][ T9350] inet_sendmsg+0x147/0x5e0 [ 238.185077][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 238.190512][ T9350] ? inet_sendmsg+0x147/0x5e0 [ 238.195190][ T9350] ? ipip_gro_receive+0x100/0x100 [ 238.200212][ T9350] sock_sendmsg+0xdd/0x130 [ 238.204610][ T9350] kernel_sendmsg+0x44/0x50 [ 238.209114][ T9350] sock_no_sendpage+0x116/0x150 [ 238.213946][ T9350] ? sock_kfree_s+0x70/0x70 [ 238.218433][ T9350] ? debug_check_no_obj_freed+0x211/0x444 [ 238.224136][ T9350] ? mark_held_locks+0xa4/0xf0 [ 238.228890][ T9350] inet_sendpage+0x44a/0x630 [ 238.233476][ T9350] kernel_sendpage+0x95/0xf0 [ 238.238041][ T9350] ? inet_sendmsg+0x5e0/0x5e0 [ 238.242699][ T9350] sock_sendpage+0x8b/0xc0 [ 238.247092][ T9350] ? lockdep_hardirqs_on+0x418/0x5d0 [ 238.252358][ T9350] pipe_to_sendpage+0x299/0x370 [ 238.257197][ T9350] ? kernel_sendpage+0xf0/0xf0 [ 238.261938][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 238.267207][ T9350] ? __put_page+0x92/0xd0 [ 238.271517][ T9350] ? anon_pipe_buf_release+0x1c6/0x270 [ 238.276955][ T9350] __splice_from_pipe+0x395/0x7d0 [ 238.281959][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 238.287225][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 238.292488][ T9350] splice_from_pipe+0x108/0x170 [ 238.297320][ T9350] ? splice_shrink_spd+0xd0/0xd0 [ 238.302266][ T9350] ? apparmor_file_permission+0x25/0x30 [ 238.307793][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.314013][ T9350] ? security_file_permission+0x94/0x380 [ 238.319627][ T9350] generic_splice_sendpage+0x3c/0x50 [ 238.324890][ T9350] ? splice_from_pipe+0x170/0x170 [ 238.329895][ T9350] do_splice+0x70a/0x13c0 [ 238.334213][ T9350] ? opipe_prep.part.0+0x2d0/0x2d0 [ 238.339317][ T9350] ? __fget_light+0x1a9/0x230 [ 238.343974][ T9350] __x64_sys_splice+0x2c6/0x330 [ 238.348826][ T9350] do_syscall_64+0x103/0x610 [ 238.353404][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.359273][ T9350] RIP: 0033:0x4582b9 [ 238.363155][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.382744][ T9350] RSP: 002b:00007f9075ccdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 238.391148][ T9350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 238.399114][ T9350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 238.407062][ T9350] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 238.415009][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9075cce6d4 [ 238.422964][ T9350] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 238.432865][ T9350] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/9350 [ 238.442254][ T9350] caller is sk_mc_loop+0x1d/0x210 [ 238.447342][ T9350] CPU: 0 PID: 9350 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 238.456371][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.466464][ T9350] Call Trace: [ 238.469739][ T9350] dump_stack+0x172/0x1f0 [ 238.474056][ T9350] __this_cpu_preempt_check+0x246/0x270 [ 238.479584][ T9350] sk_mc_loop+0x1d/0x210 [ 238.483833][ T9350] ip_mc_output+0x2ef/0xf70 [ 238.488344][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 238.493435][ T9350] ? __ip_make_skb+0xf15/0x1820 [ 238.498294][ T9350] ? ip_append_data.part.0+0x170/0x170 [ 238.503746][ T9350] ? dst_release+0x62/0xb0 [ 238.508139][ T9350] ? __ip_make_skb+0xf93/0x1820 [ 238.512969][ T9350] ip_local_out+0xc4/0x1b0 [ 238.517365][ T9350] ip_send_skb+0x42/0xf0 [ 238.521596][ T9350] ip_push_pending_frames+0x64/0x80 [ 238.526788][ T9350] raw_sendmsg+0x1e6d/0x2f20 [ 238.531380][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 238.536831][ T9350] ? find_held_lock+0x35/0x130 [ 238.541590][ T9350] ? __lock_acquire+0x548/0x3fb0 [ 238.546531][ T9350] ? ___might_sleep+0x163/0x280 [ 238.551364][ T9350] ? __might_sleep+0x95/0x190 [ 238.556023][ T9350] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 238.561655][ T9350] ? aa_sk_perm+0x288/0x880 [ 238.566162][ T9350] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 238.571697][ T9350] inet_sendmsg+0x147/0x5e0 [ 238.576187][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 238.581631][ T9350] ? inet_sendmsg+0x147/0x5e0 [ 238.586290][ T9350] ? ipip_gro_receive+0x100/0x100 [ 238.591295][ T9350] sock_sendmsg+0xdd/0x130 [ 238.595692][ T9350] kernel_sendmsg+0x44/0x50 [ 238.600201][ T9350] sock_no_sendpage+0x116/0x150 [ 238.605031][ T9350] ? sock_kfree_s+0x70/0x70 [ 238.609518][ T9350] ? debug_check_no_obj_freed+0x211/0x444 [ 238.615221][ T9350] ? mark_held_locks+0xa4/0xf0 [ 238.619966][ T9350] inet_sendpage+0x44a/0x630 [ 238.624540][ T9350] kernel_sendpage+0x95/0xf0 [ 238.629123][ T9350] ? inet_sendmsg+0x5e0/0x5e0 [ 238.633797][ T9350] sock_sendpage+0x8b/0xc0 [ 238.638210][ T9350] ? lockdep_hardirqs_on+0x418/0x5d0 [ 238.643487][ T9350] pipe_to_sendpage+0x299/0x370 [ 238.648321][ T9350] ? kernel_sendpage+0xf0/0xf0 [ 238.653063][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 238.658328][ T9350] ? __put_page+0x92/0xd0 [ 238.662637][ T9350] ? anon_pipe_buf_release+0x1c6/0x270 [ 238.668082][ T9350] __splice_from_pipe+0x395/0x7d0 [ 238.673086][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 238.678356][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 238.683623][ T9350] splice_from_pipe+0x108/0x170 [ 238.688453][ T9350] ? splice_shrink_spd+0xd0/0xd0 [ 238.693374][ T9350] ? apparmor_file_permission+0x25/0x30 [ 238.698904][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.705148][ T9350] ? security_file_permission+0x94/0x380 [ 238.710762][ T9350] generic_splice_sendpage+0x3c/0x50 [ 238.716035][ T9350] ? splice_from_pipe+0x170/0x170 [ 238.721046][ T9350] do_splice+0x70a/0x13c0 [ 238.725361][ T9350] ? opipe_prep.part.0+0x2d0/0x2d0 [ 238.730464][ T9350] ? __fget_light+0x1a9/0x230 [ 238.735136][ T9350] __x64_sys_splice+0x2c6/0x330 [ 238.739972][ T9350] do_syscall_64+0x103/0x610 [ 238.744562][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.750436][ T9350] RIP: 0033:0x4582b9 [ 238.754322][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.775909][ T9350] RSP: 002b:00007f9075ccdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 238.784304][ T9350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 238.792271][ T9350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 238.800221][ T9350] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 238.808173][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9075cce6d4 [ 238.816133][ T9350] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 238.825402][ T9350] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/9350 [ 238.834766][ T9350] caller is sk_mc_loop+0x1d/0x210 [ 238.839875][ T9350] CPU: 0 PID: 9350 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 238.848897][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.858960][ T9350] Call Trace: [ 238.862252][ T9350] dump_stack+0x172/0x1f0 [ 238.866583][ T9350] __this_cpu_preempt_check+0x246/0x270 [ 238.872111][ T9350] sk_mc_loop+0x1d/0x210 [ 238.876336][ T9350] ip_mc_output+0x2ef/0xf70 [ 238.880820][ T9350] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 238.885909][ T9350] ? __ip_make_skb+0xf15/0x1820 [ 238.890741][ T9350] ? ip_append_data.part.0+0x170/0x170 [ 238.896704][ T9350] ? dst_release+0x62/0xb0 [ 238.901098][ T9350] ? __ip_make_skb+0xf93/0x1820 [ 238.905927][ T9350] ip_local_out+0xc4/0x1b0 [ 238.910324][ T9350] ip_send_skb+0x42/0xf0 [ 238.914562][ T9350] ip_push_pending_frames+0x64/0x80 [ 238.919759][ T9350] raw_sendmsg+0x1e6d/0x2f20 [ 238.924341][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 238.929780][ T9350] ? find_held_lock+0x35/0x130 [ 238.934526][ T9350] ? __lock_acquire+0x548/0x3fb0 [ 238.939466][ T9350] ? ___might_sleep+0x163/0x280 [ 238.944315][ T9350] ? __might_sleep+0x95/0x190 [ 238.948974][ T9350] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 238.954587][ T9350] ? aa_sk_perm+0x288/0x880 [ 238.959098][ T9350] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 238.964644][ T9350] inet_sendmsg+0x147/0x5e0 [ 238.969135][ T9350] ? compat_raw_getsockopt+0x100/0x100 [ 238.974575][ T9350] ? inet_sendmsg+0x147/0x5e0 [ 238.979242][ T9350] ? ipip_gro_receive+0x100/0x100 [ 238.984247][ T9350] sock_sendmsg+0xdd/0x130 [ 238.988649][ T9350] kernel_sendmsg+0x44/0x50 [ 238.993132][ T9350] sock_no_sendpage+0x116/0x150 [ 238.997964][ T9350] ? sock_kfree_s+0x70/0x70 [ 239.002451][ T9350] ? debug_check_no_obj_freed+0x211/0x444 [ 239.008152][ T9350] ? mark_held_locks+0xa4/0xf0 [ 239.012898][ T9350] inet_sendpage+0x44a/0x630 [ 239.017479][ T9350] kernel_sendpage+0x95/0xf0 [ 239.022046][ T9350] ? inet_sendmsg+0x5e0/0x5e0 [ 239.026729][ T9350] sock_sendpage+0x8b/0xc0 [ 239.031168][ T9350] ? lockdep_hardirqs_on+0x418/0x5d0 [ 239.036458][ T9350] pipe_to_sendpage+0x299/0x370 [ 239.041288][ T9350] ? kernel_sendpage+0xf0/0xf0 [ 239.046031][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 239.051298][ T9350] ? __put_page+0x92/0xd0 [ 239.055622][ T9350] ? anon_pipe_buf_release+0x1c6/0x270 [ 239.061072][ T9350] __splice_from_pipe+0x395/0x7d0 [ 239.066077][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 239.071354][ T9350] ? direct_splice_actor+0x1a0/0x1a0 [ 239.076617][ T9350] splice_from_pipe+0x108/0x170 [ 239.081454][ T9350] ? splice_shrink_spd+0xd0/0xd0 [ 239.086379][ T9350] ? apparmor_file_permission+0x25/0x30 [ 239.091908][ T9350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.098135][ T9350] ? security_file_permission+0x94/0x380 [ 239.103748][ T9350] generic_splice_sendpage+0x3c/0x50 [ 239.109028][ T9350] ? splice_from_pipe+0x170/0x170 [ 239.114033][ T9350] do_splice+0x70a/0x13c0 [ 239.118346][ T9350] ? opipe_prep.part.0+0x2d0/0x2d0 [ 239.123439][ T9350] ? __fget_light+0x1a9/0x230 [ 239.128098][ T9350] __x64_sys_splice+0x2c6/0x330 [ 239.132932][ T9350] do_syscall_64+0x103/0x610 [ 239.137521][ T9350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.143390][ T9350] RIP: 0033:0x4582b9 [ 239.147271][ T9350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 239.166866][ T9350] RSP: 002b:00007f9075ccdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 239.175256][ T9350] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 239.183211][ T9350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.191160][ T9350] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 239.199132][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9075cce6d4