b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dd65853fa4f77fa4bee584a4c015462c2b3c6ee05da6eb6355312e76a1c3d3023039542f0ec70b17795baea3096458781a22efe3866b000e2e56127bf667a2be53bcbfac4b186f11d11ae2bf90266dc694e7a57e69ce0f35484f97596d71b52b01de9b8ff7a4c32f0e505bbe34c4686f4d136c137cde6c85eb54908c4757060a1c2c06142a05aa1c27cc33d81b6c8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 00:07:55 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x0, 0x87, {0x87, 0x0, "42eb54860c4c1cb0ab5a0377d724b8e9a47f0174e4182c14d3f8e0f850eb193c0933a89af19877c76bceb066b722f814f856354518f4f8d61668b7f24e27dcc921259d35de71e06a6ed77ca60ea007c5dae05732e7486dccb2db1588841f88b66683adc3771834c557cc948a997aec1e36405c81c127d74caf64ff231f7390ce30e34fa3aa"}}, 0x0}, 0x0) 00:07:55 executing program 2: 00:07:55 executing program 4: 00:07:55 executing program 2: 00:07:55 executing program 4: [ 2568.119539][T11967] fuse: Invalid rootmode 00:07:56 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r6, 0x0, 0xff, 0x3, 0x9, 0x10, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x10, 0x7, 0x1}}) sendmsg$can_j1939(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r7, 0x2, {0x1, 0x1, 0x5}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="d1c23fc307acb61676b0d710ed533fe1b9656c999f8d20df8b0239adb01cc3d030cd54808e0c400a75302ba401a5b0a09a0d09cc9cb913053f08333af10e4c8b318000791f72de53a4038cd7e65ac051d2165f26ea15e14c5d89145e6417893cdcc889db191dbfbb505f6307c69113a04a16619b82ed925830e117ec6036a228c56b9f4cc191f145455fb119891f99513bbe4a9d999691cdc7a759a728686ed7249d58ff8c986893615231915835728125e1ca97b3a57146aa541d3e1b5dd9c11a00cbce9a35c3f95258c2c925b39da439ecdff8920a7fa52e44e9ae8c8cbf38e484adea5e2e487f266c2022", 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048800) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r8, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) [ 2568.198837][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2568.250428][T14493] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2568.275450][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2568.490230][T14493] usb 2-1: Using ep0 maxpacket: 16 [ 2568.610618][T14493] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 2568.618851][T14493] usb 2-1: config 0 has no interface number 0 [ 2568.626675][T14493] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2568.637302][T14493] usb 2-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 2568.647148][T14493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.662000][T14493] usb 2-1: config 0 descriptor?? 00:07:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x290c302a) keyctl$read(0xb, r1, 0x0, 0x0) keyctl$set_timeout(0xf, r1, 0x6d7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) recvmmsg(r3, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/254, 0xfe}], 0x3, &(0x7f0000000500)=""/243, 0xf3}, 0xf2}, {{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000a00)=""/156, 0x9c}, 0xb76f}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x3}, 0x3}, {{&(0x7f0000000bc0)=@nl=@unspec, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000940)=""/10, 0xa}, {&(0x7f0000000c40)=""/1, 0x1}], 0x2, &(0x7f0000000cc0)=""/217, 0xd9}, 0x8001}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000dc0)=""/191, 0xbf}, {&(0x7f0000000e80)=""/243, 0xf3}, {&(0x7f0000000f80)=""/123, 0x7b}, {&(0x7f0000001000)=""/104, 0x68}], 0x4, &(0x7f0000005200)=""/4096, 0x1000}, 0x8001}, {{&(0x7f00000010c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000007400)=[{&(0x7f0000006200)=""/220, 0xdc}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/135, 0x87}, {&(0x7f0000001140)=""/110, 0x6e}, {&(0x7f00000073c0)=""/61, 0x3d}], 0x5, &(0x7f0000007440)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000008440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000008640)=[{&(0x7f00000084c0)=""/225, 0xe1}, {&(0x7f00000085c0)=""/7, 0x7}, {&(0x7f0000008600)=""/11, 0xb}], 0x3}, 0x9}, {{&(0x7f0000008680)=@isdn, 0x80, &(0x7f0000008840)=[{&(0x7f0000008700)=""/33, 0x21}, {&(0x7f0000008740)=""/42, 0x2a}, {&(0x7f0000008780)=""/113, 0x71}, {&(0x7f0000008800)=""/62, 0x3e}], 0x4}, 0x6}], 0x8, 0x20e2, 0x0) 00:07:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x21}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000640)={0x0, 0x0, 0x2, {0x2, 0x22}}, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x21, {[@local=@item_4={0x3, 0x2, 0x0, "1495832f"}, @global=@item_4={0x3, 0x1, 0x0, "7bd7df0e"}, @global=@item_012={0x2, 0x1, 0x1, "d98d"}, @local=@item_4={0x3, 0x2, 0x0, "1213ac7c"}, @local=@item_4={0x3, 0x2, 0x0, "82983de3"}, @global=@item_4={0x3, 0x1, 0x0, "af02416c"}, @main=@item_4={0x3, 0x0, 0xb, "359f5b03"}]}}, 0x0}, 0x0) 00:07:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/timer\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0xffc}, 0x0, 0x0) 00:07:56 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) getpid() readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5437, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 00:07:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000280)=ANY=[], 0x0, 0x0) msgrcv(r1, &(0x7f0000000500)={0x0, ""/146}, 0x9a, 0xd6d0c418f59fe7d3, 0x0) msgsnd(r1, &(0x7f0000000140)={0x3}, 0x4, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/181) 00:07:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x10010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900210076657468"], 0x48}}, 0x0) open_by_handle_at(r1, &(0x7f0000000000)={0x4d, 0x7fffffff, "6ad5d41f19a66ab3121599e8d80f84cc0673835584b94b845b8737794c8d2b5d3c42698b58e114c646736ef8e36cf11a1073438668281fdb1d657ec26999fb50faea97e6ea"}, 0x200000) [ 2568.808459][T11998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2568.846221][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2569.060141][T14493] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2569.420191][T14493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2569.431358][T14493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2569.441737][T14493] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2569.451560][T14493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.468709][T14493] usb 3-1: config 0 descriptor?? [ 2569.955581][T14493] kye 0003:0458:501A.0045: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 2569.967168][T14493] kye 0003:0458:501A.0045: tablet-enabling feature report not found [ 2569.976284][T14493] kye 0003:0458:501A.0045: tablet enabling failed [ 2570.152719][ T2669] usb 3-1: USB disconnect, device number 51 [ 2570.929905][ T6487] usb 3-1: new high-speed USB device number 52 using dummy_hcd 00:07:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$unix(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) tkill(r0, 0x19) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) capset(0x0, 0x0) 00:07:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r1, r2}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = dup2(r0, 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @empty}}}, 0x84) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r2) setgid(r2) 00:07:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x38a2, @remote, 0x1, 0x2}, 0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$RTC_UIE_ON(r2, 0x7003) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x42881) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x1, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x84) 00:07:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0x0) 00:07:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/timer\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0xffc}, 0x0, 0x0) [ 2570.981694][T21777] usb 2-1: USB disconnect, device number 53 00:07:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x81}, 0x0) creat(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000c40)={'nat\x00'}, &(0x7f0000000240)=0x78) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a751cbf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 00:07:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x400, 0x0) pread64(r0, &(0x7f0000000240)=""/196, 0xc4, 0x3) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth1_vlan\x00', 0x1}) readv(r1, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r5 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x10040, 0x83, 0x1b}, 0x18) ioctl(r5, 0x8000, &(0x7f0000002200)="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") recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2571.300400][ T6487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2571.329949][ T6487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2571.340262][ T6487] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2571.349317][ T6487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.361213][ T6487] usb 3-1: config 0 descriptor?? [ 2571.664851][ T6487] kye 0003:0458:501A.0046: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 2571.675967][ T6487] kye 0003:0458:501A.0046: tablet-enabling feature report not found [ 2571.700512][ T6487] kye 0003:0458:501A.0046: tablet enabling failed 00:07:59 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 00:07:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x6}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 00:07:59 executing program 0: r0 = socket(0x11, 0x80000, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:07:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x21}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000220000002200eb822b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:07:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r2, &(0x7f0000002200)="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"}, 0x1c) syz_usb_connect(0x0, 0x369, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8f, 0x15, 0xdc, 0x10, 0xbda, 0x8150, 0xe92b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x357, 0x1, 0x0, 0x97, 0x10, 0x8, [{{0x9, 0x4, 0xcc, 0x2, 0x9, 0x3f, 0x9, 0xb1, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7ff, 0x9}, {0x6, 0x24, 0x1a, 0x20, 0x9}, [@acm={0x4, 0x24, 0x2, 0x2}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x5}, @dmm={0x7, 0x24, 0x14, 0x9eb, 0x4}, @mdlm_detail={0xcd, 0x24, 0x13, 0x2, "d8cead3885a903424da18b83ec71fd1e1a99d4abe4cd34efdf6427c59c8857e2a5de5983e8426deb7d5de9ebca1638c89db7e581a0cfb308d3bb251473624277ce3423cbe32c33197ad679de189b12129ddad571a79ebd7b56c77ea9a091539d196f1690aa7655ba8b0f68db3979bf589073acf4c9ab8ee25bcb4168ac7984f9918d85deed7a4e3b831133c2967d3e5cd1b9102e50ddb8d7ba9f276c1c99ce7f576d9821cbf970da654edeb6175a9f6b9913321b4fdc0570003c8c038ed81fefe930de6e918a1d064d"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x8, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xc000}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x0, 0x39}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x6, 0xff, 0x8, [@generic={0x56, 0x4, "cd690775639e932eb186584deda5375fef72f3b45e74ab0d4532608f6a34968ac0cec178856dd386c7686cb466024c1873f7b2a408e6ae8efa097f44006a4520a43f5f8bb2a9217083c0e1b753cc62bc95e3f7b2"}, @generic={0xb5, 0x7, "b4322e6bf34915890a09cdb8871c6a89925394a835a0910120d017a6eb5bb9f547e3df7cb9f810d1acd3e34f20af0d3f93be44aa0dec96bad91e8487fa355f0bb415971ebbb2d519f8f820e0b8db386fceeba5ff0fb5b0acb2459d82a2cf3f18c6b7924a8de6377cef92ebac64f6a7829271fd3c8c821269dc8d15549e63aff5587b796a9b2d7e6d8a39e6c1869b2200b61e043ff7091382fdf2baab68eaa3b986b9a458062e9f9f2730add49f1735060638c3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x34, 0x1, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x418, 0x1, 0x6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0xfffe}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x80, 0x9, 0x7f}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xff, 0x7, 0x8, [@generic={0xa, 0x11, "dffc90fd753c41f6"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x4, 0x2e, 0x4, [@generic={0xd0, 0x7, "9a6854cb0cecff1556ed0e9c74d18e5743e431f99abea4b78ab345744ec4739661ce317d941bdd803270455326324558c0c1a568b2f9ed598737bde0bba5b6d4faf7f6c80dda1c2cf81facb929fb6984b074908957cb0df8a6eb6f59aaf045acd34646d5d7fda920ed57556b86a6b0faef9090ccf7fc810724c993462e9773b9c9f49c4d0227edffb805722dc1d30d47a23574fba0f24f40bc04509f12fc4bef46d99ef7b47fe9574c889b7cf7dbcedaf9dbbdf5b4c14a9d92ab5ebce76bb6dbc9138032337398bc7d23a9a7022b"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x3, 0x0, 0x1f}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0xac, 0x0, 0xff, 0x1}, 0x107, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x5, [{0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "63acffa052ddec782b7c59d9d741108fe636271b60c1a2de01"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x801}}, {0x3d, &(0x7f0000000580)=@string={0x3d, 0x3, "34c2436eaf8d3e483c4c70a5b5ac6aecf9e58a47188703018b215a45bb999362316135ac6aeffc1b2fa048365d52f5a11962b00b487ae88223d786"}}, {0xc8, &(0x7f00000005c0)=@string={0xc8, 0x3, "090151805fc83be195bcb7e59f357c7dc51f8c62bc34231f7fa19def77ab275265aba2b76ed909910ef325060ef0a78f1bbb0295c8abc6ea1734d561a792a04ebd68fe5c435c4a256e7271d25320938b55525a2fdb2b3dc7baa0fd239fafa27062719986d65d707816e68dfae5a500cd563bf68135000cfe3f0a61e5158cdf3023994fcaf0c642b1948628a80fa250671dd99be5e0ff2ad03bf8be463eadfc04d362909a901c4dcb565d77836af186c573949bc0a3faf5272d7890aa8346d98ae54671b715eb"}}, {0x2a, &(0x7f00000006c0)=@string={0x2a, 0x3, "d752402034b760ee70a7d2025d3aa4694f3dd301d7468832c887a642b8e72fea759512b4bc473646"}}]}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0, 0x5}}], 0x344, 0x10122, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0x1ff, 0x12) sendfile(r3, r4, 0x0, 0x800000080004105) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000440)={[0x8]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40246608, &(0x7f0000000480)={0x3f, 0x4, 0x0, 0x5, 0xb7c, 0x400}) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) [ 2571.789897][ T6487] usb 3-1: USB disconnect, device number 52 00:07:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x8df5, 0x400021f6}, 0x14) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 00:07:59 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)) socket$tipc(0x1e, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:07:59 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x6}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 00:07:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="e52a0c74fc66422bd77e6a1fb98f62256f60f5f00afc6e7b797aaaea5d0e8d48e2d1b8daac031a16cede69a2ca49e7c2a44f652b75c7fdfe61ad5b2ebf962c21e88e9736cbb0183f4f4d271b4b65bc69955b25f20b6abb7083fdbe43d18723f12bdbad009afeca669c188bb37c4f12623c766b4b2d6fcbf7d02a9e925de9c65ace543651a1a990c719f659148540b729c86add76f0c406e4312c3e7f8a45f70e7335e2e404c87ada26cd4003ea56cff00d313247b0d78a79ffde1cc15628501019d7d5817fb6176a100af462cd1580ec598cce1f352e2217123b431bbd49a49de67861fc672309fc63c290db5e0a755d0275f036442299", 0xf7}, {&(0x7f00000002c0)="048403bd5c5832a0a36851a6a0b5e3d59799f1b7a64a05104244ef539ac71c98d72a4bfd3c6b4bbe1a8e3b0ed789a1ab6dbcb455552e4e7daace62b175308dcd91f917a90b2179275834927e54909add14d83a8f6aeb6f0b5f9d98f82c8938571a78ffc81135bc4240a6d81ede18de4ed04177ffa634ae9a47f947ed41178a74d80e8d18102f1f66d43c58", 0x8b}, {&(0x7f0000000400)="b25a21c26c03cb2336b800a2c3c3b120491b2340b699c8e511a0323ad0cccad2dbb01c7e3a88a396ab7728a2715505c26d3821bd87f80b5c6159d88275642339bc9e50a01b2b138b4388a9b9df24a089eef4803ad50f9edb9c152bb224dad3fa2bbde061cb9d18513dbe81c47d20953f13ebe92989fcdbbf0147e7cf71b67aecad130b295b3257c1dd3ec809d8b305fb9757b0d9810d141b3f0dcb9565f6fcc167707dc92a4b32fd62e1da97820c17b2790e72c7d3495044bf631cfefff32e5acc2d93dffce0", 0xc6}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000000500)="665abd30f4b466a1a133dec7e22b356d9fa295ad77e5acb2a7d1e1e3e68c0079653ccc2f6f5a68e841c8b79ccbc2cb0bf190e3a07d5afc74d3536f6eb4d3e7c1a61eef9365b36d85e2041d6df56a7ffe85f01070ac7aeb71cf5d3a26680b1c5fa5454657ba52044fb1123eff602eef13da9ab55ebd212955b6f1cc05b401db4d04f3a9af0641d5142556651ccacffe0c6774308fd2928bc4c5d8162b1fc6c566c70cd82ea693ec1644c82d70449a", 0xae}, {&(0x7f0000000000)="c3f963ce2a1984f98915995906d7d99cfccb0ee6cce6afd574f8d40c58a9158a46af4fa74da05d5ab8d8ca1a144d9d8dab1ffbc3220dfd1348a31722633d63d345a136df", 0x44}, {&(0x7f0000000100)="b349326ceda9933a8cbe62ad67da511dcf30", 0x12}], 0x7) 00:07:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 00:07:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2572.130003][T31462] usb 4-1: new high-speed USB device number 56 using dummy_hcd 00:08:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES16, @ANYBLOB="2800129195ee04c100afa5000000000000000000000001d888c2ab5801bf9c93b772d93e44d38ee0775239cd17d71d9b95cd9d010d06d3b03a8271d525f4b3102c4c9a22278d8ac26e810ebc9106eaa2cedc11a33a8ac6c628b4852ca91d4151018e8424967d1a8405d00a8470b893589e701a9c82435e6d528c5f7dd7630582263667aa9a9dce730da19e8d3e6700297dff06c7fe33a61ada8d0facea66023caeb9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="7c57819f5e40f9accf7343030cf7dc8962162c2adf97000004fb00"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r4, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000240)="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") r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40020) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r6, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r7 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8040, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) 00:08:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:00 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x0, 0x2f00, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) [ 2572.280108][ T6487] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2572.361141][T12153] __nla_validate_parse: 3 callbacks suppressed [ 2572.361152][T12153] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2572.377722][T12153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2572.379961][T31462] usb 4-1: Using ep0 maxpacket: 16 [ 2572.444036][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2572.454552][T12153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2572.590497][T31462] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 2572.599065][T31462] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 2572.607575][T31462] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2572.616865][T31462] usb 4-1: config 0 has no interface number 0 [ 2572.623161][T31462] usb 4-1: config 0 has no interface number 1 [ 2572.629351][T31462] usb 4-1: config 0 interface 204 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 2572.640315][T31462] usb 4-1: config 0 interface 204 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 2572.651456][T31462] usb 4-1: config 0 interface 204 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 2572.664843][ T6487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2572.676610][T31462] usb 4-1: config 0 interface 205 altsetting 105 endpoint 0xD has an invalid bInterval 52, changing to 7 [ 2572.687979][ T6487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2572.698204][T31462] usb 4-1: config 0 interface 205 altsetting 105 has an invalid endpoint with address 0x80, skipping [ 2572.709230][ T6487] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2572.718379][T31462] usb 4-1: config 0 interface 205 altsetting 105 has an invalid endpoint with address 0x80, skipping [ 2572.729344][ T6487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.738166][T31462] usb 4-1: config 0 interface 205 altsetting 105 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 2572.754975][ T6487] usb 3-1: config 0 descriptor?? [ 2572.760185][T31462] usb 4-1: config 0 interface 204 has no altsetting 0 [ 2572.767006][T31462] usb 4-1: config 0 interface 205 has no altsetting 0 [ 2572.929949][T31462] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=e9.2b [ 2572.939021][T31462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.948089][T31462] usb 4-1: Product: 숴湃趯䠾䰼ꕰ겵䞊蜘ă↋䕚馻抓愱갵᯼ꀯ㙈å‰ê‡µæˆ™à®°ç©ˆè‹¨íœ£ [ 2572.960370][T31462] usb 4-1: Manufacturer: à  [ 2572.964984][T31462] usb 4-1: SerialNumber: ĉè‘졟법㖟絼῅抌㒼ἣꅿî¾ê­·åˆ§ê­¥ëž¢é„‰ïŒŽØ¥ï€Žè¾§ë¬›é”‚ꯈã—懕銧亠梽峾屃╊牮퉱â“讓剕⽚⯛윽ꂺâ½ê¾Ÿç‚¢ç…¢èš™å·–硰ïªê—¥ì´€ã­–臶5︌ਿ谕ミ餣ì©ì›°ë…‚蚔꠨êˆæ¢퀪䚾괾Ӽ拓éªá²ì­åµ–è·ï…ªì–†é‘³ì‚›ïª£âŸµç ­êªäšƒè«™ä›¥ë±î¬• [ 2573.002407][T31462] usb 4-1: config 0 descriptor?? [ 2573.231427][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x2 [ 2573.238243][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.275877][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.289350][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.307120][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.314507][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.329212][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.336905][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.351279][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.358067][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.375021][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.385698][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.396402][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.407295][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.417993][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.428516][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.443267][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.453947][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.466925][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.477654][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.488354][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.503485][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.513026][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.524668][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.534264][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.545199][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.554539][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.565898][ T6487] kye 0003:0458:501A.0047: unknown main item tag 0x0 [ 2573.578285][ T6487] kye 0003:0458:501A.0047: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 2573.596338][ T6487] kye 0003:0458:501A.0047: tablet-enabling feature report not found [ 2573.604484][ T6487] kye 0003:0458:501A.0047: tablet enabling failed [ 2573.640672][ T6487] usb 3-1: USB disconnect, device number 53 [ 2574.219619][T21777] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2574.629707][T21777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2574.640632][T21777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2574.650824][T21777] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2574.660255][T21777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.669184][T21777] usb 3-1: config 0 descriptor?? 00:08:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x21}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200fa2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:08:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000001c0)={0x80, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x84) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:08:02 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(0x0, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0xfc00) 00:08:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, 0x0, 0x0, 0x3}}) 00:08:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x420, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x18, @private1={0xfc, 0x1, [], 0x1}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x703, @dev={0xfe, 0x80, [], 0x32}, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x627, @dev={0xfe, 0x80, [], 0x33}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2d, @private2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @empty, 0xe0f7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xcc7, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4352}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ca}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8a63}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x20c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa7, 0x3, "c9794af2c6712a4ccebbc4a06ad7922b44f9c1f7e22bdeaeeca541271849dcc977096d22196cbd3e3d61aadca275db2f9f30f79cdd3327617c75829458cb2d01a8853c782049e355e5d29976f70e1c173f5951a0d1e2eeb5559f381f9f624d89108f286de33e3e12a37b239fb3a7156ebb0aeab3b16914cef618c5689953e1de2fd915bc702113bbdc55f153cc1babfc7b7f86d69c21f60c9e67a457fd3658a4525f35"}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "1691d4723bf0fe3c56ad7795291e95cfcba804adee1a648064102177dba975270d45418285d9193856be998f13c6c57766a6e03193cd3d72e7022cf67f48584f668c0f155496a7b97b610120fda818af5b29d427fff9727b39b3570cc2f9ee2b54c95d0c53c3d486e0ef839688cd8b1d52eebc51cccb01"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "056f52033a52380dbe68cf37409e6e4305701943512e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "6b31b40b8121a10b5e899339c34123b6e567bb49cb33b31238852bb05c78c94ff27659199699b558225b751cab54a2bcba4f5a71767efce963d7137da2502bab33a8aa8abf7a349e901b933449de1e8adeb2dd05d86c77d9fe1b460a0dbcc7eb44b30f2f1d94c5c586e204af97dee1a74c4f8e8f99c801fdb1fb9efdf8e0ba153f3d7af64b311096f0"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:02 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0xca200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair(0x3d, 0x6, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000300)={r6, 0x1, 0x6}, 0x10) pidfd_open(r4, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x1, 0x9, 0x2, 0x5, 0x5, 0x5}) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0xfc00) [ 2575.019667][T21777] usbhid 3-1:0.0: can't add hid device: -71 [ 2575.026520][T21777] usbhid: probe of 3-1:0.0 failed with error -71 [ 2575.087260][T21777] usb 3-1: USB disconnect, device number 54 00:08:03 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0xca200) getpid() sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0xfc00) 00:08:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000200)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/118, 0x76}], 0x3}, 0x40) 00:08:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:03 executing program 1: bind$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x51012, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x81}, 0x0) r0 = creat(0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @initdev}, &(0x7f0000000040)=0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000c40)={'nat\x00'}, &(0x7f0000000240)=0x78) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 2575.370170][T31462] rtl8150 4-1:0.204: couldn't reset the device [ 2575.376524][T31462] rtl8150: probe of 4-1:0.204 failed with error -5 [ 2575.489517][T21777] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2575.849683][T21777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2575.860730][T21777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2575.872578][T21777] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2575.882030][T21777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.898216][T21777] usb 3-1: config 0 descriptor?? [ 2576.371031][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.379042][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.398145][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.410769][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.417565][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.425020][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.432549][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.439684][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.446472][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.453678][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.460825][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.467694][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.474916][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.487829][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.506790][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.513970][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.528121][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.535279][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.549406][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.556205][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.569516][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.576314][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.599355][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.606295][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.613513][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.620788][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.627575][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.634998][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.649323][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.656108][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.663384][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.670634][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.677423][T21777] kone 0003:1E7D:2CED.0048: unknown main item tag 0x0 [ 2576.695643][T21777] kone 0003:1E7D:2CED.0048: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 2576.722403][T21777] usb 3-1: USB disconnect, device number 55 00:08:04 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0xca200) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socketpair(0x0, 0x0, 0x9, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0xfc00) 00:08:04 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r1 = socket$isdn(0x22, 0x3, 0x25) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'team_slave_0\x00', 0x3ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000002800270d00000000000000006aefb2a5c8bfeae0e28561f560b8a9f600000000", @ANYRES32=0x0, @ANYBLOB="04000000000000000000000007000100667700001800020014000300766574683100"/44], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', r6}) 00:08:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 00:08:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 00:08:04 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', r2}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:05 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:05 executing program 5: r0 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r2 = dup(r1) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40045201, &(0x7f0000000200)) 00:08:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x21}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="4e02f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:08:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:08:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0xfff, 0xabf, 0xb3, 0xfffffff7, 0x81, "b55918900ef2dcbd59b12d0bf46003c97255a4", 0xf0d2, 0x10000}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x1, 'vcan0\x00', {}, 0xfa}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9940980}, 0xfffffffffffffcca, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f80000000108010200000000000000000500000305000300010000001c000480080001400000000508000140000001ff08000140000008e10900010073797a31000000002c00048008000340000000060800074000000008080006400000004008000540000000e208000140000000013400048008000140000000b108000140fffffff708000140000069f808000140000013ff080002400000000408000240fffffeff24000480080001400000000408000140020000060800014000000002080001400000001f0900010073797a31000000000900010073797a30000000000900010073797a30000000000900010073797a3000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 00:08:05 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @empty}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0xca200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair(0x3d, 0x6, 0x9, &(0x7f0000000200)) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0xfc00) 00:08:05 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2577.334515][T12277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2577.430139][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2577.449589][T31462] rtl8150 4-1:0.205: couldn't reset the device [ 2577.474013][T31462] rtl8150: probe of 4-1:0.205 failed with error -5 [ 2577.531946][T31462] usb 4-1: USB disconnect, device number 56 [ 2577.531983][T12292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2577.559300][T21777] usb 2-1: new high-speed USB device number 54 using dummy_hcd 00:08:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x4e24, @remote}}) ioctl$KDENABIO(r1, 0x4b36) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r2, &(0x7f0000001300), 0x0, 0x0) 00:08:05 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00008100000081007ef222f7de4c1cf11f46cc1e65af15e9a47f0174e4182c14d3f8e0f850eb193c0933a89af19877f856354518f4f8d61668b7f24e27dcc921259d041d728bf1a2c85baced65084de235de71e06a6ed77c880ea007c5dae05732e7486dccb2db1588841f88b66683cac3771834c557cc948a997aec1e369e83"], 0x0}, 0x0) 00:08:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) 00:08:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x51012, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x81}, 0x0) creat(0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x1) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000c40)={'nat\x00'}, &(0x7f0000000240)=0x78) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac613ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 00:08:05 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:05 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004105) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2030005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r4, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000100)='sysfs\x00', 0x0, r0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x0, @generic={0x1d, "3b3dadac4c4ba621c3ed5baf88a1"}, @isdn={0x22, 0x7, 0x3, 0x80, 0x1c}, @hci={0x1f, 0x1, 0x1}, 0xfe3, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x6, 0xf67c, 0x3}) write(r5, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='gfs2\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0/bus\x00', &(0x7f0000000180)='sysfs\x00', 0x4400, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) 00:08:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2577.806917][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2577.865700][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2577.929289][ T2669] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2577.939486][T21777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2577.964270][T21777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2577.976326][T21777] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2577.986117][T21777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.001099][T21777] usb 2-1: config 0 descriptor?? [ 2578.199271][ T2669] usb 6-1: Using ep0 maxpacket: 16 [ 2578.320105][ T2669] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 2578.328396][ T2669] usb 6-1: config 0 has no interface number 0 [ 2578.335101][ T2669] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2578.345439][ T2669] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 2578.354614][ T2669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.364153][ T2669] usb 6-1: config 0 descriptor?? [ 2578.476357][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.493351][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.513821][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.527903][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.540833][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.547616][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.566617][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.581291][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.588105][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.606203][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.622859][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.637223][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.650984][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.657814][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.677573][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.689955][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.696823][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.719169][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.725983][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.746925][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.753956][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.769277][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.776078][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.783410][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.790456][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.797240][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.804109][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.810961][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.817740][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.824605][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.831456][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.838239][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.845118][T21777] kone 0003:1E7D:2CED.0049: unknown main item tag 0x0 [ 2578.853965][T21777] kone 0003:1E7D:2CED.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 2578.867688][T21777] usb 2-1: USB disconnect, device number 54 [ 2579.469186][T31462] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2579.829200][T31462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2579.840289][T31462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2579.851904][T31462] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2579.861765][T31462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.871898][T31462] usb 2-1: config 0 descriptor?? [ 2580.170821][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.177677][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.198814][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.213412][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.220659][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.227489][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.234711][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.242475][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.252197][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 00:08:08 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xf0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 00:08:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x181800, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:08:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:08:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000000c0)=""/100) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:08 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2580.267443][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.275605][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.289142][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.322253][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.347359][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 00:08:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2580.391016][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.417075][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.429826][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.465842][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.501362][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.526075][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.556064][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.563660][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.579449][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.586291][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.601543][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.608378][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.622624][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.633359][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.644066][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.654918][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.672597][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 00:08:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x21}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200fa2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 00:08:08 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1245, 0x2, 0x6, 0x0, 0x3300}, 0x14}}, 0x0) 00:08:08 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0xca200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000103, 0xfc00) 00:08:08 executing program 3: write(0xffffffffffffffff, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000007, 0x8010, r0, 0xc000) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 2580.683137][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.685998][ T2669] usb 6-1: USB disconnect, device number 110 [ 2580.693777][T31462] kone 0003:1E7D:2CED.004A: unknown main item tag 0x0 [ 2580.767232][T31462] kone 0003:1E7D:2CED.004A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 00:08:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 2580.827542][T31462] usb 2-1: USB disconnect, device number 55 00:08:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x800007, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) 00:08:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000000000)="c1ee272364626ff50900000003000000050000000ec94c0fe6c789b2f2", 0x1d}], 0x2}}], 0x1, 0x1) 00:08:08 executing program 3: r0 = socket(0x10, 0x80000, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4126, 0xfffffffffffffd54}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) readv(r1, &(0x7f0000000180)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0xf) ioctl$TCSETSF(r1, 0x5437, 0x0) 00:08:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 00:08:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0xb, r1}, 0x10) [ 2581.259070][ T2669] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2581.669454][ T2669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2581.684442][ T2669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2581.695536][ T2669] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2581.705386][ T2669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.714871][ T2669] usb 6-1: config 0 descriptor?? [ 2582.200584][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.207414][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.226027][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.241417][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.248215][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.255893][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.263170][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.270574][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.277361][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.284575][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.291686][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.298476][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.305703][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.312830][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.319989][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.326776][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.334015][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.341169][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.347962][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.355119][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.362290][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.369492][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.376276][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.383458][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.390609][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.397388][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.405058][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.416621][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.426035][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.437663][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.447146][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.461296][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.468087][ T2669] kone 0003:1E7D:2CED.004B: unknown main item tag 0x0 [ 2582.483578][ T2669] kone 0003:1E7D:2CED.004B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 2582.498533][ T2669] usb 6-1: USB disconnect, device number 111 [ 2583.188849][ T2669] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2583.598841][ T2669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2583.609936][ T2669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2583.620178][ T2669] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2583.629720][ T2669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.642703][ T2669] usb 6-1: config 0 descriptor?? 00:08:11 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) 00:08:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000009c2c00fe880000000000000000000000000001fe8000000000000000000000000000aa000000b32d9c6787a6ab4f00000000006441295b171af525ab47c4bdd4b2d96d6dbaf9fa500032d8f8bb79f3db246119e2d22d880943d246d834cd816a74554657f7174d4d07e8b0187eb41daba898606c9add58952c4dac5f37841a997918bc8a878f442b5a1eafc025150e23636e0000020027000000080f00000024b071104df8774f493d213aa5359876e363798c048cdb7e468190778006e959"], 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e24, 0x5112, @loopback, 0x6}}, 0x3, 0x90}, &(0x7f0000000000)=0x88) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/250) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r6, 0x1ff, 0x100, 0x400, 0x9, 0x4}, 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 00:08:11 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1245, 0x2, 0x6, 0x0, 0x2f00}, 0x14}}, 0x0) 00:08:11 executing program 0: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x444}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000d80)={'veth0_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) r5 = socket(0x10, 0x80000, 0x10000003) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x10000, 0x9}]}, 0xc, 0x3) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000e80)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0xf801, 0x4e22, 0x7, 0x2, 0x20, 0xa0, 0x2b}, {0xfff, 0x1, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff}, {0x541, 0x0, 0x2, 0xffffffffffff886e}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @multicast2}, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe4) sendmmsg$sock(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x84, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xbf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0xa8, 0xc0, 0x74, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "d0"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xdb6b, 0x5, 0x8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x81}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x1, 0x9, 0xf7, 0x3, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x1, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x0, 0x1, 0x8, 0xff, 0x7f}, 0xc, &(0x7f0000000880)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x7, 0x8c0}]}, 0x6, [{0x6, &(0x7f00000008c0)=@string={0x6, 0x3, "85cacfe0"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x403}}, {0xe5, &(0x7f0000000b80)=@string={0xe5, 0x3, "21931903f4b53b37f41c5d77767f81d081e90ab23af38fbe1520d5503c83a23af8b37fb9d446634a949e613d912a71c15acf79455b16094acd1a00f99af9cfda133400ca2ee606cd518b68f704889a03ec191ff54e1b09f7fdf555b699a737372188d3647b80621978611a945dfcdf72e05b3c0f52db0baaf2a9eeb814f4f17942161c07f8a08ec780713c3f81b8685acba8adbffefd3c0d613d47a21caa9adeea8e43fb96b85d66c7ed2d817f60e0ff19e768b36f1d4a58d7d6330eb752cfbccf3e2400c9ae9b80edd72f089cdd85391aa8fe8b5f9fbc8f1c4799c87fa7376e9be367"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0a}}, {0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="1803c005a77d215744237764055d8ac1abe2aef3b83d187c"]}, {0x3f, &(0x7f0000000cc0)=ANY=[@ANYBLOB="3f037706678a98f4c18d1404ba1c1d6faafd15b48669589bd8c63b59b0d481ab120e06afe1e5551f87c282a920374fc9a0c74b9fefd82af308ccdacf01c687"]}]}) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000000)) 00:08:11 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x81}, 0x0) creat(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000c40)={'nat\x00'}, &(0x7f0000000240)=0x78) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac616ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 00:08:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 00:08:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x3c}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 2583.901808][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2583.918884][ T2669] usbhid 6-1:0.0: can't add hid device: -71 [ 2583.933555][ T2669] usbhid: probe of 6-1:0.0 failed with error -71 [ 2583.984837][ T2669] usb 6-1: USB disconnect, device number 112 00:08:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000050c0)={@void, @val={0x0, 0x0, 0x7}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "08dca1", 0x14, 0x21, 0x0, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5577cb956d9ec04295b22d015b8541cf6322abf80c9f409e2c4bba7eb1c70ff8baa65d6c38380f926d1847590b8e5a0b02b379807fe53ac7056d7ce04b29461ec2f41ca2e70abf0f2afd232f30f117d0cdd7e60d413f16e3226a315a263d6f0fce94f75e846d2a35053dc412fb2665b865f671c04d2ed44fc4a90f96fcb1d1665cc6bc7927a8b72ee22f8c14f55df91c51e1c9333489903c5355bc455bd372a372af7197b021071f5a150d19ac17ea4d1f0055d13bbdecdea34eba79b96b8502a26b9d4a659962591d6943746b8f80130c24051ffe5e627946cd93533c5f873e61961145433581618f8644a84ccb95d46daa16c7d55e3065350705b46ab08d5da2a527a9049c1400ebc26bc0d629b5dd92d51a5739d2c19a9f0c03c00a5307c61e4108efe2f0a3c361ee0e8e13fae4cc950ae3d272e5c3e3c9283c7cee01774f4b5d1ab691fa6d961ccdb0487d6c4345259e9161a658542e964054d01509f526ed3ce2a38ed57c02f154f23d966bf08ceb837f932a513c3aac5803c71436ff4880496fb7dde5c4a7fb2934fb93f8ad45c7d27fce4ad070093c35645fea110d98008fb2452a151a0b2ef5ad2304d2ea9428e7160fb28c830e768367a4bb33792e150c394e3e011217765d52e5011c18024e3acce32e51a83d7c7963007e19c2fa88a45e2990fa0874e3b7cc3a6c6df319d6b689f75284b2a3bf03654f0193f47663fc4c523add415130f597f100dfbd0412108d2e8a66a5e457d109a77bb1aac7cc55d62ed6fa8083d5037af0d778eb2574222d3a3e1aebae3edafc36678b17d92dd4e3904e36d3c202353a0fcb0dcdcb26a903e6c117a11f0ec614ef2ad8e899bdf034fe00669beae1c342b05556d958489835ee42ce73a84dacd2a404a663ab3349efb7cb3ae4a953f3b10f566f4102fbf9caef9d18acca14780a8025d9176f39e37466d909df9b076065945101e2da70e69df38441f93d76604fd36174e2b82920469b7dddc2894b3a9663cb21ecdf2486cc867d1251d7c185f44e96d38375c90ab3f38ce6808a6d098d585d773513dc52d893b321375cc99ffc270ede1065c9474d39195aa40db8cc1d1167ece01376b9cd870f26bce4a0eb6e515d86e16070b05af3c8ecc0c34d9b467436fcc5b6ebd175d48c3974c7516856b74f5fb64dbc8667706fc07c7b3483834901fc5f8484449bb8ef7f9b09ca07eaa4c0596b70704e530782d6188ce17987eb19dfb57b6ed7486ed1c1003bf7e4844c035d1df79a508818dee691d5975c3ae69ee972f9b5171c629c8e1eadd19070a010cebf8c5f16b05be90aafc997c5c187ec681f3c0eca451bbf2e3776dc5c307a9e4627cf1752892bc90043ea91699de63f5101ce3ca8b370ecb9176ee14f02ab99ca6a6c29933eaa6b42ba4c00f581874744184b4748d8fdc4fdefbcc0d16877696a1036a38e9703a8cd2c665177c301faf873394de05600c69c681a911f71d945e11af620af070b89223e3242f2d0706d75882f9a3c948945702a3d3cb09bc48ef9f74d5b4afa06cf95ad577e1da3c32443798d04457ebaf521633c7e99d384ddf572c281d096d59630d1ccfe61f9ea847d5e7e80fe7ddd6e28ba6f5eeb21039dc3a781d144061e685145d63e71d45cc5ef83921ac78bc733c994d0b09492a271b5c2a0cd98a86b98705021e20c9f3baede99e63662fc71738b29bd90acb4eb5fd401dc2c42c845815b18183a1f0c86d1779f6f684d40ccfa3da99196640da28ca2fc35182c5f7eaad0636b61935e581adbcd6566f383dbc3180ccfc40a75a6615eb3512ebcafb207a498f71d2566ba794c45801c40821c44a20aa3c7a14a2475ddb19c59937bd4dd8825b45528823cfb31c03f7ded36851edaf9ffb836406743f1eb513a4d30216fc5fb9846c908f93cc40cd39f34ddad2707f177f77b45b1a135a843d5527f97159a2f1b089bab3a71bd09e97b4e58a5fc531571b76cb2567066dece2fdbf145c92feb080ba5605800627a925346199358dd18963e952824bc7c3d3f188137fa87af44c85433de939fd03a46e5695197eb34791a29ccb160951a4e0934896a7f478b170b371798cdca155070b475b0990681960ffcbe6c10e3ee6f39c0f0651fb28c1340edd14aab8bfe9cb14c348efc0cc97e35fbd2336e26d9682c7c164f6ce573e2a4948592610f809ac21b74d76fe03f1a75534ea00400a11b5dd3a66c4c1d888d9c0c64878a7676aced440d04688ef5f6060357d31c07659ee9d3bb97a2c7d927f9f439be88ab5c3c329a134bf41e5f82bb69af4172644cfaaf623738867b546d43eebb7c40aa146ef6242b5245337db4c03b7a75f01b8cb42999835ae2c83a85576388dc20ccf996780bc46437b6f46c28b8a769ee51f7b0d6dd4e4ce928053597b4e2594d6736094185963c2d1cebebc36227b8bb891192bb177b3fe8c8bc00787c22b735def398ce08b166d9a702fb76f7591b3591729721b5ba9419eb4c58d581d11b3100678089004cb898e8475dc4d58073bc614e9f6a4af5a0276d5dea61419a0de14cbfbf9e8f7888c3f70f3072504871f136115dc705e4b958caf858549460d5727ca01184aa14726789c61923011a07132d72acc419a48caf39f160589961b0eef7d4cb05dd56975bbad4a8ec046ae01fe65fae6bee49c55399b7569fe1d069bbbea9cd17f0e4537c2886f734e439dff21e5bb1c8899f0030cd593109e8beb67021dbcb3116cf0979bcc13a3d8ea4ef2012b74bd0c63be5d4fcb18cb2f2c1a0a5b25eca500abafc74f01a7c2c13f994fa821079de93042d51c74c06f45f0d62297892fb0e0a70213b3bdd2eb8e52f78289cbcc1c8a9f9f63008930a061b57b11b980c05ea68ce4decf704e2976baaf5d7ad3ea6990b384640482d10b1f8b313128c9c9584d39c8c8b5be777132ef3fba2fb9bc9f427f9f7d04f0f1b688ae8163c068781123db57ec0da610854130071b860ebd9d275103325f49d0707f54bc69312c924f8f9a8a19878b8275b2acdd0d7c85f01471b2dc27cce9d783c7296ccf0a08122c9dfc6b8a592b32daaee82d56a5cda07a1bd5d307005b52204996bc35669ca49f6d58e088e25c4603561bcdabed6c0c59eecae71d052e4bb2e774c2c9b7c4ee9e5e3123004337e6df662333405f2ad0e2c88424077c85e5d6be7903a3e0ff1069d0ae64961cf7c0c426ed4fe7db52dbc94926552e976c1359240c14f45213235cd8c0e31ad2474bbc3ae8546031248e2e238b4b876f12c9c9779c4f75d0db7802c304766632b33f172d9b06e9c241f58ac00128555475c5ff436e528d9969469d1a58dd29ed24a8612c1a51ea8ae9da836cdd1cf6a0c32368a262e327220e175da1e2da91c6d5161dc87690828e2b1336eed99cf0ef5621969f638af1d9688fd90bfa4f0ba8cff0fc885e3880301fd4927ae981e839eea08c10bc3f4510a6d5eb1b530c5ba371ed9231fa17ef0c8158e629a613d4280861cfa9711aad292a1c5a2f4840a2ca5fad0c099586b13fb2ab9d82ea966c9bc8a1e4fc6cbeff2afc0c4ff11dbbf68fdc09342a5c782589ac1b9903d0b1617ba0186f50025452059815ed3649bde0fabb0ffc33730e262fc6d03fc0971e22d5eb127ae844f2bf861dd99ed9c3529a8916e59af910dbf796d879613305e992eaf322850803bdae72f202d631d214ec13276144423ae0dc595585c13cb9cbedb32dc51a26a73c0b6b4b38810051abdc66eefc9a2341c05e0b0c77b8013646df14a7d03598f9a7c94c47736060b7a242af56d76475cf1dbaab8607c258ab67440caa86899b19b1f8e8a821086dd2d59f9e4a63f1cc27c7c553de440d3c2e856b9583e25cf6fe53591baed0e870b3bfab5faa7e147c767e8723193e8e1d0b700d9ca1d37425665480c951df4999ee74ef97de9340dd29c354bcdb661825c424cc41e20c52cad691dec22e3b78f1e46993cdb1a36e7b2dbe41be01f1f4b81d66c30f366df771064cc5fb0e652e70e397515abcca789e1b8541da66f0a212fdcacf107efda413fcb4ccf6b7425a1fa7abf68aabc7497257fb99014ecb5c0c86f0bc5826808550673f42ff7ca25e822fc49e24feea00027b076d3ff9695c1c5bd91aff30a8643662b79139730f3abc879c898253bf0dc0afe37a1b31d24361990d06c875461ac2c85ca713f223121b35d55468b50ba293fd043cd2c32b9dd58ac98662b1b30664af4ee9c36b3be5e016b05c30ab91bac38770d1742ed5cfb21da4af0181311d88076857ffa2f24a885c1728dd8d9e6bc26de68490adf44a332bd6aece386aa40d0c7ee40b92c6816b321fd83e3f744e4ce2c5ae601b14652f15b8819c3f814cdf95dad76bda5c214cf8c03112bc42678cf7c77c7896abe8190750331a0ca1c6e55d1ab04dd6b6e1bfdef45aab29a318009c223e790240463ac11927a6930b275bd6b9f121173bf1a5ba67fb675822b3f86e8d5f09cfbc62e5a0429a893779c244f52a9d7b0988332f6ee66231e4cba175126a5e69b2e44240961a777ca4e8c7117e4e567c2e1804158675102e29c99855b3a4a60c99b36fdbd71388823ddf2259cff86f881b543bef815730655f5bd658250d49f64b234d1c36f5d4f410d13ab47b50cd28e79f467764505405e8e5a6dca5b213ddf7755ae5ff9013c3540739857456df2cc1a6522d18bb64f9323a26dbc4d1c2c24f9ff2aff0adb55c209c6b3ca03bd14d30f39518eec1183c1a540dc34e2d0df0aa68692ccd065cd2e62077dde17880de47e035d68de6e811ad4d7ee0a8b1d79ba3feecb5e49b463cb77c6dfe926ae46ca47b423a9454e6d959f186450a186803131be41f0c7d7721d55f93ba4524786d7efe2d568d01ad5753b007edda46f4f47bbbab30fa3e06d12f98df9e39df5105ac0cf3e9ec9c951343fe5b2f0d075fa5377a148b1632cd46bebf19ff84f6a422bef8458f907548876c3dd1ad513d2858e1776097c89c56711dc392490fb646ccf575dfc4b8b08838a31ea1da97f56c0f0b3af0df846b18c94c03a87f295cd60601198080bb5408c8df06ab2689b139a2585f7bdce69f1e26ac38aed61abe953dfe358019604cde60eddb6ff2bd81a00022f0b5a2cd8dd2996d27dc052b962ca0f2e4e0c533e5e3da7151e2d5c466192ec2922351ad3ca5207c514a7b6f9cbd6a52256a1ed5bcd975b0f5c950b430db0f7119aa67f325f1166a96c11c1fe184325f3468ecdf3d8023743cec8b71c19d1f09570724b6c02ba9f91a9564f89a84dbbb5d7b7a3544d9207447996bc078485355f247b5030443382e6b4a21d8fe3876d1391fdef301aa256962b7787ce40073df21dde5d23afe8ff13e82d6c7eea831e12496cf7e3ade4b3ccf48a4a36e2ff9a137b675ef203d2d117a202028fe618a270f508744a4993282e4596c23df597fb960e567a443d6469801507b2ee93954f6844efd3427047d828290c3d364a4e0514b51b70f3530ff42289fdb437aba979f697829f31183bb8f13f471b73f7424264ddae06547b937e1bad7672c9382dac524bf3c1d1225e75aa32d1f4d225f0d0a54d55abc8b090a021c22698c858e0c03163289290b621b6a686a1f491de22e9ac86125f32c006"}}}}}}, 0xfca) 00:08:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0245628, &(0x7f0000000080)={0x0, 0x5, 0x206, [], &(0x7f0000000000)=0x63}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f0000000240)=@generic, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1, &(0x7f0000000300)=""/254, 0xfe}, 0xfffffff9}], 0x2, 0x10122, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x1, 0x6, 0xdec, 0x5, 0x3}, 0x14) 00:08:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', 0x0}) 00:08:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x800007, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$sock(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 00:08:12 executing program 4: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0xc46388bb8361d422) fcntl$setownex(r1, 0xf, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') sendfile(r2, r3, 0x0, 0x1) 00:08:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 2584.229013][ T6487] usb 1-1: new high-speed USB device number 9 using dummy_hcd 00:08:12 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x40200) poll(&(0x7f0000000040)=[{r2, 0x1029}], 0x1, 0xffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xb0000001}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ad93}], 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0xfb) syncfs(r3) 00:08:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = gettid() r3 = getpgid(0x0) rt_tgsigqueueinfo(r3, r2, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x800000080004105) ioctl$KDADDIO(r1, 0x4b34, 0x9) [ 2584.518627][ T6487] usb 1-1: device descriptor read/64, error 18 [ 2584.908617][ T6487] usb 1-1: device descriptor read/64, error 18 [ 2585.178590][ T6487] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2585.448776][ T6487] usb 1-1: device descriptor read/64, error 18 [ 2585.838507][ T6487] usb 1-1: device descriptor read/64, error 18 [ 2585.958692][ T6487] usb usb1-port1: attempt power cycle [ 2586.668458][ T6487] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2586.758485][ T6487] usb 1-1: Invalid ep0 maxpacket: 191 00:08:14 executing program 0: r0 = socket(0xa, 0x3, 0x40000001) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)=""/103, 0x67) 00:08:14 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 00:08:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) fsetxattr(r3, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 00:08:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="e00000001000010100000000000000007874732873657270656e7429000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009cb000000000000000000000b4416c83ebd4149ee85c991ce4980beb16115"], 0xe0}}, 0x0) 00:08:14 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff, 0x2, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x80000001, r0}, 0x38) 00:08:14 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000010100000000000000007874732873657270656e7429"], 0xe0}}, 0x0) [ 2586.908435][ T6487] usb 1-1: new high-speed USB device number 12 using dummy_hcd 00:08:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x400000100002f, {0x0, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:08:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000100000000000000060bc7d9400082f00fe8000000000000000000000000000bbff0200000000000000000000000000012b"], 0xfdef) 00:08:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 00:08:14 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000001500)="1c616d9e4bc71da8a905dff30f58ce6f563279627a473e4e2f387b1072932d2692e9019af8b79efb865b9be2406d9fcbc1c2b6dbe69182dd30d007b3d0698338d063b8b5697c117bb48e8394b3ca79c71e02be68d554e8036562df20b384993d7a8078917b5a22ab6c45d97170da425543a22bb9599ef865124ad093e1e7db76efeb9505b1f8f2a03a93b0d368fd28a51b8fe52274890dfc5d4652e4eff0fc5d88d00000000000000000b8e80800000000000000b2cac387cc0a6ca3e4a9ff71e6df0c2c99c8beb8ac", 0xc9, 0x20004094, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:08:14 executing program 3: r0 = socket(0xb, 0x2, 0x1000) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2587.142083][T12584] input: syz1 as /devices/virtual/input/input105 00:08:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="14000000071000"/20, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) r4 = gettid() r5 = getpgid(0x0) rt_tgsigqueueinfo(r5, r4, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) r8 = gettid() r9 = getpgid(0x0) rt_tgsigqueueinfo(r9, r8, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0xffffffffffffffff}}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x4000004) ioctl$TIOCNXCL(r1, 0x540d) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0xfd, 0x1}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2587.255769][T12595] input: syz1 as /devices/virtual/input/input106 [ 2587.398460][ T6487] usb 1-1: device not accepting address 12, error -71 [ 2587.410150][ T6487] usb usb1-port1: unable to enumerate USB device 00:08:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r0, r1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x13c8, 0x4) 00:08:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', r7, 0x8, 0x700, 0x9, 0x6, {{0xb, 0x4, 0x2, 0x1, 0x2c, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @private=0xa010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xd1, [@local, @rand_addr=0x64010102]}, @end, @noop]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc02}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="631f05645359"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0xc005) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:08:15 executing program 3: r0 = socket(0x10, 0xa, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) inotify_init1(0x80800) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:15 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 00:08:15 executing program 3: setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "d11c8bd98dbdff0564a174b232540606c2aa"}, 0x13, 0x3) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2587.655429][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:08:15 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000000)={{0x4, @addr=0x101}, 0x8, 0x8, 0xb9}) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xf, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0x9) fcntl$setstatus(r1, 0x4, 0x46000) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2588.065101][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:08:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x0, 0x0, @local, 0x1b}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x45) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x76, &(0x7f00000000c0)={r2}, 0x8) 00:08:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 00:08:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r2, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="96000000000000002abd7000fcdbdf250000000097f8037fa2f73aaf2703d4221dd3ce5309f81720788163f1ee3bf1bee15f39b3574a68885ee279f702a5a714fe77baa91efa229857047f8b00d4e79673e4466acea1411dad55a47ce5100e8c40fdeb160b9c", @ANYRES32=r2, @ANYBLOB="0a0002000300f1ff04001000"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x840) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r0, 0x0, 0x9) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000280)=""/187) write(0xffffffffffffffff, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYRESHEX]) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x6) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000100000000000000060bc7d940008"], 0xfdef) 00:08:16 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r3, 0x402, 0x1) fcntl$setownex(r3, 0xf, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') sendfile(r4, r5, 0x0, 0x1) 00:08:16 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x8000000002, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="4c0000001200ff09", 0x8}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:08:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)={0x4, 0x0, {0x0, 0x0, 0x6, 0x0, 0x6}, 0x6}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000140)={0x3, 0x8, 0x4}) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x5, 0x4) 00:08:16 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@alg={0xe0, 0x10, 0x101, 0x0, 0x0, {{'xts(serpent)\x00'}, [0x2d, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 00:08:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgrcv(0x0, 0x0, 0x0, 0xe000000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 00:08:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgrcv(0x0, 0x0, 0x0, 0xe000000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') 00:08:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4000) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x20}}, 0x18) 00:08:16 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc08c5336, &(0x7f0000000180)={{}, 'port1\x00'}) 00:08:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000a9a632053b498e14bc00800000e58f240007050000004007a2a30005000000", @ANYRESOCT=r0, @ANYBLOB="00000000ffffffff000500000900010068666a6300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r1, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x174, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x81}, 0x10) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x10, 0xdc8f, 0x2, {{0x1e, 0x4, 0x0, 0x1a, 0x78, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@cipso={0x86, 0xf, 0x3, [{0x2, 0x9, "c8c74e3c5657df"}]}, @cipso={0x86, 0x52, 0x1, [{0x6, 0xa, "97d918c874bb8ccd"}, {0x0, 0x7, "4054fa761b"}, {0x1, 0xc, "72d8ed8018a778b2104f"}, {0x5, 0xe, "82b224c36120a24fa2840845"}, {0x2, 0xb, "89b921ad4c34ed724a"}, {0x7, 0x9, "39fcf8f15e2d2f"}, {0x6, 0xd, "d086e293bbd95ee11d66be"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x56, r2}) 00:08:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x20000000000006, 0xfffffffffffffffd}, 0x0, 0x0, 0x2bb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x8000, 0x4) ftruncate(r3, 0x200005) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x2}) ftruncate(r1, 0x200005) sendfile(r0, r1, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) [ 2589.120404][T12704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in], 0x10) [ 2589.198535][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000100000000000000060bc7d9400082f00fe8000000000000000000000000000bbff0200000000000000000000000000012b7e"], 0xfdef) 00:08:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000340012800b00010067656e657665000024000280050003000900000004000600140007"], 0x64}}, 0x0) 00:08:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x9, 0xfffffffa}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r2, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000010201020000000000000000000000002400018014000180040001"], 0x38}}, 0x0) 00:08:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba72e2aba00000001100b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd2cf533a75bf5ff1b0816f3f6db1c000100000000000000497400000000000000f25dcc326d3b09ffc2c65400"}, 0xfffffffffffffdba) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = openat2(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40082, 0x71, 0xc}, 0x18) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000140)=0x3) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000080)) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:08:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 00:08:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000010201020000000000000000000000002400018014000180040001"], 0x38}}, 0x0) [ 2589.422622][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2589.432313][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2589.448237][T12738] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2589.524164][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2589.553657][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2589.573113][T12744] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:08:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000140)={0x10001, 0x1, &(0x7f0000000080)=[0x3ff], 0xffffffffffffffff, &(0x7f0000000100)=[0xfff, 0x4, 0x5, 0xfffb]}) r4 = dup2(r2, r3) r5 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x4c080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000140)={r6, &(0x7f0000000300)=""/80}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000001c0)={r6, 0x13}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={r6, 0x2}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r7, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:08:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x6}]}) 00:08:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c41000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendfile(r1, r1, 0x0, 0x800000080004105) ioctl$VIDIOC_G_FMT(r1, 0xc0cc5604, &(0x7f0000000080)={0xb, @sliced={0x3f, [0x4, 0x8000, 0x3, 0x7fff, 0xcfb4, 0x100, 0x1, 0x40, 0x0, 0x3, 0x6, 0x9, 0x1ff, 0x100, 0x9, 0x101, 0x2, 0x20, 0x200, 0x7, 0x74e7, 0x3ff, 0x2, 0x2, 0x2, 0x3, 0x400, 0x5, 0x5, 0x9652, 0x7, 0x3, 0x0, 0x9, 0x4, 0x0, 0x2d, 0x8000, 0x1f, 0x2, 0x7, 0x1, 0xb, 0x2, 0x1000, 0x2, 0x101, 0x3], 0x3}}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000001020102000000000000000000000000240001801400018008000100ac1414bb0800020000000000050002"], 0x38}}, 0x0) [ 2589.742442][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 00:08:17 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x2001, 0x0) pwritev(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000480)="17", 0x1}], 0x2, 0x0) 00:08:18 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@alg={0xe0, 0x10, 0x101, 0x0, 0x0, {{'xts(serpent)\x00'}, [0x2d, 0x28, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 00:08:18 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0xe000000, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x0, 0x84) 00:08:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000010201040000000000000000000000002400018014000180040001"], 0x38}}, 0x0) 00:08:18 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@alg={0xe0, 0x10, 0x101, 0x0, 0x0, {{'xts(serpent)\x00'}, [0x5f, 0x28, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) 00:08:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x4c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x4c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="7f451f1d06590d31eeb49982160013a534fc3918507b33ce7c340e146743c0c71314bba08a5d853a43f0ed08cd3fd3c4a9730fc3e0ec082879ae6bee470820e26b68c0735345fb556e718d9c898da46883c673a44c1fdd9dd53925d0de4d5f3fa2fd5e0d59f31a0941d7", @ANYRES16=0x0, @ANYBLOB="080429bd7000ffdbdf25060000000800090004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r4, 0x7f}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x800000080004105) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004105) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000100)={r9, 0x1}) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) [ 2590.081336][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2590.114217][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x401, 0x5, 0xfffffffe, {0x6, 0x5}, 0x40, 0x4}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2590.194333][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:08:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x20}]}}]}}]}, 0x44}}, 0x0) [ 2590.236407][T12780] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:08:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000100000000000000060bc7d9400082c"], 0xfdef) 00:08:18 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) pidfd_open(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:18 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xf, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:08:18 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x2001, 0x0) pwritev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)="b4", 0x1}], 0x1, 0x0) 00:08:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0xda) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000100)=0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:08:18 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="e000000010000101000000000000000078747328"], 0xe0}}, 0x0) 00:08:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:08:18 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x0, 0x0, @local, 0x1b}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x45) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x77, &(0x7f00000000c0)={r2}, 0x8) 00:08:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) close(r4) socket(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6e596739eaadef3959660a381f2e6fc9"}}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) 00:08:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$NBD_DO_IT(r2, 0xab03) 00:08:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x0, {0x0, 0x0, 0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2591.119095][ T2725] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2591.178883][T12859] input: syz1 as /devices/virtual/input/input107 00:08:19 executing program 1: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) [ 2591.301831][T12867] input: syz1 as /devices/virtual/input/input108 [ 2591.368276][ T2725] usb 6-1: Using ep0 maxpacket: 16 [ 2591.488890][ T2725] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2591.517249][ T2725] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2591.529235][ T2725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2591.572849][ T2725] usb 6-1: config 0 descriptor?? 00:08:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 00:08:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_ep_write(r0, 0x0, 0x5d, &(0x7f0000000100)="89fad8532d6966144a5b9e671c5d1f2edb4b4628651974752afe0cf47200452e424aeee0021e862dd6df33d80a16eec6f982aacbec3fcb3ce0bf1a97952c4763a3dfae878e8a0ae7e20bc12a301789c50a05191ec5619f8f04a4b3d225") 00:08:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x70, "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"}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4, 0x2) write(r5, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) write$P9_RRENAME(r7, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) readv(r4, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 00:08:19 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@alg={0xe0, 0x10, 0x101, 0x0, 0x0, {{'xts(serpent)\x00'}, [0x5f, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xe0}}, 0x0) [ 2591.639235][ T2725] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 00:08:19 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) dup3(r0, r1, 0x0) 00:08:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) msgrcv(0x0, 0x0, 0x0, 0xe000000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) [ 2591.850950][T21777] usb 6-1: USB disconnect, device number 113 [ 2591.938116][ T2725] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2592.298257][ T2725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2592.309379][ T2725] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2592.320021][ T2725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.334293][ T2725] usb 3-1: config 0 descriptor?? [ 2592.448124][T21777] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2592.727973][T21777] usb 6-1: Using ep0 maxpacket: 32 [ 2592.828839][ T2725] keytouch 0003:0926:3333.004C: fixing up Keytouch IEC report descriptor [ 2592.853540][ T2725] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004C/input/input109 [ 2592.888682][T21777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2592.912415][T21777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.925855][T21777] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2592.935138][T21777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.943936][ T2725] keytouch 0003:0926:3333.004C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2592.949405][T21777] usb 6-1: config 0 descriptor?? [ 2593.018679][T21777] hub 6-1:0.0: USB hub found [ 2593.248003][T21777] hub 6-1:0.0: 1 port detected [ 2593.481157][ T2725] usb 3-1: USB disconnect, device number 56 [ 2593.907944][T21777] hub 6-1:0.0: activate --> -90 [ 2594.257839][ T2669] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2594.343058][ T2725] usb 6-1: USB disconnect, device number 114 [ 2594.637777][ T2669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.649366][ T2669] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2594.659982][ T2669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.669613][ T2669] usb 3-1: config 0 descriptor?? [ 2595.007748][ T2669] usbhid 3-1:0.0: can't add hid device: -71 [ 2595.013827][ T2669] usbhid: probe of 3-1:0.0 failed with error -71 [ 2595.026294][ T2669] usb 3-1: USB disconnect, device number 57 [ 2595.117651][ T2725] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2595.357681][ T2725] usb 6-1: Using ep0 maxpacket: 16 [ 2595.477656][ T2725] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2595.491267][ T2725] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2595.500548][ T2725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.512444][ T2725] usb 6-1: config 0 descriptor?? [ 2595.564405][ T2725] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 00:08:23 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{0x0}], 0x1) 00:08:23 executing program 1: syz_usb_connect(0x0, 0x2f5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050f24810cd0610017e7e010203010902"], 0x0) 00:08:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4014) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x1, 0x100}, &(0x7f0000000040)=0x8) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x20040040) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x5, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000140)={0x7, 'veth0_to_hsr\x00', {0x7}, 0x7}) 00:08:23 executing program 4: r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) 00:08:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000080)=@isdn={0x22, 0x1, 0x4, 0x0, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="a7ad0a2f084dab79e16912d3f0cccd7c203d8d60055b2b1dd1a35b5d3e9c14dddc4c131ae7550d7ceb1e31acdf974e6aac50ad5481ea7a5ac7ace9ad029f8eb6731b61cd71fb23ba22726e7a6738d8f2cf9192350bb3e383752827a100ed157f1563ff55921cc40650ba7ead18485a26f7054a2f4854622505cd76157f4018cd4eb9a33506aaf327b5aefa342b1ad98ad04dd64ec8dff2ec04783433ebee33e21eae742941c8fcc6f3b34353037adb1139d45a044726f3e776e546ca685e0931707fe516b995904ae1132d94a747b2f908b18b5bc3c9a6390c10e7e381bbc6e2e7f8100fbda530fa5c87d424a144ab723c2d46fec07d", 0xf6}, {&(0x7f0000000200)="751eaa1cbe80fe5e8cee7bd3844d1b9c1822e92f11a0375cdf179539d1d866354dc2318ac89e1b1566f71456d593910f383be232d6891fd36989da8d56b67e0aa56149e834c5dd3913329329a05310e1e732552483b46038f41ae8e5f38af378262a43a84af6fb633c6f20a027d33ef46326b4a180ed450215c50b3830a6dd8d1d8b29d9bbf00230f52e32936c7857199f357e7ba2f0c0cc9223c312593b7961cc7d6e8e58c7", 0xa6}, {&(0x7f00000002c0)="0c1bb0940c2a66ee5f6306b8160e222c6faefd1f7044633f049b0d68637ce14f358b0919ceeb45acf6a636502c5a393dbbd0f52db41a1779b0ee2e6d5597301350f43924abb2acd9f724dbc38512d404742a3e14202f23f4cf9b6ddc197b2221eae6944ea92c5790ba6c63f0f9b25cc661498b02d20fee92b09c6936ea76982dd2c953dcefe7943bfae956137abc4f8a856e76be90314f601cd6b715686f7044cc54d05c72043a3cd5b00a8093b14f1ff7ceaf7944f5d446b35cc7bc7a5b0d43232236906d6c5c8bfa1b0f76c71739f09c757bcb44a5e250c16450b55dca911630ad6146ad92fbbfc96bc027269d52dd49af1d0dc7400302", 0xf8}, {&(0x7f0000000000)="0a5963db2d6095bf35145debd046e5a6674b960b632e18ce931782538e90", 0x1e}, {&(0x7f00000003c0)="372c71218202cbc125c0fee2ec1ce4678e5a812b7e7ddf6b3ed4b8bb", 0x1c}, {&(0x7f0000000400)="4e1d7a14dd72c17ae9556ac911addb0908f725e5076119d42c11b02ae10de3120fa6a4c1482db5f23bda13e26747d21549ed524f7d26310d87351f129e5a23ca6d22693241dc1adf1c4db3221b2658e41b2ff22723899693fa15fcf77b1e7ca41cf662b55f994314a6b8edb82484be1a6387a49cb7428dd1ccea187959e6f16f8b7ef23d3e9bcb53fc95e00df630e36d68f4d63b25d85df40ef7a2b91ebc84e3ae91dd7e3105f34a0f5d53de1d33f33bd9d430331af0bd0417c4b8385d08b19f86055fb085707350701ea827365871bcd26a9158f51646884a288c841613ee309d63afd37b83ce", 0xe7}, {&(0x7f0000002200)="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", 0x1000}], 0x7, &(0x7f0000000540)=[@mark={{0x10, 0x1, 0x24, 0x40}}, @mark={{0x10, 0x1, 0x24, 0x80000001}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0xffff6245}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @txtime={{0x14, 0x1, 0x3d, 0x8000}}, @mark={{0x10, 0x1, 0x24, 0x1ff}}, @timestamping={{0x10, 0x1, 0x25, 0xfffffffb}}, @mark={{0x10, 0x1, 0x24, 0x5}}], 0xa4}, 0x7495933fe33730cc) 00:08:23 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=ANY=[], 0x1c, 0x0}, 0x0) r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x4, 0x0}, 0x0) [ 2595.665607][ T2669] usb 6-1: USB disconnect, device number 115 00:08:23 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) ftruncate(r1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000200)='y', 0x1}], 0x1) 00:08:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, &(0x7f00000000c0)="f0313c07667e0048b802180000000000000f23c00f21f835020004000f23f8660f388263d2b9800000c00f3235001000000f3066baf80cb84c375a84ef66bafc0cb864000000eff3430f09470f2083440f23c2c74424000b000000c744240204000000c7442406000000000f011c24", 0x6f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2595.760060][T13025] __nla_validate_parse: 5 callbacks suppressed [ 2595.760075][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f00000050c0)={@void, @val={0x0, 0x0, 0x7}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "08dca1", 0x14, 0x33, 0x0, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0xfca) [ 2595.857378][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:08:23 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbee}}) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) [ 2595.897678][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:23 executing program 4: mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/control\x00', 0x0) rename(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/', &(0x7f00000000c0)='./file0\x00') 00:08:23 executing program 2: madvise(&(0x7f0000abe000/0x1000)=nil, 0x1000, 0x5) [ 2596.017787][ T2725] usb 2-1: new high-speed USB device number 56 using dummy_hcd 00:08:24 executing program 2: r0 = socket(0x1, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) [ 2596.277527][ T2725] usb 2-1: Using ep0 maxpacket: 16 [ 2596.300906][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2596.401859][ T2725] usb 2-1: config 0 has no interfaces? [ 2596.568306][ T2725] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=7e.7e [ 2596.577592][ T2725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.585711][ T2725] usb 2-1: Product: syz [ 2596.590526][ T2725] usb 2-1: Manufacturer: syz [ 2596.595203][ T2725] usb 2-1: SerialNumber: syz [ 2596.604968][ T2725] usb 2-1: config 0 descriptor?? [ 2596.854347][ T2669] usb 2-1: USB disconnect, device number 56 [ 2597.627493][ T2725] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2597.867412][ T2725] usb 2-1: Using ep0 maxpacket: 16 [ 2597.987472][ T2725] usb 2-1: config 0 has no interfaces? [ 2598.147498][ T2725] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=7e.7e [ 2598.156615][ T2725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.165971][ T2725] usb 2-1: Product: syz [ 2598.170894][ T2725] usb 2-1: Manufacturer: syz [ 2598.175523][ T2725] usb 2-1: SerialNumber: syz [ 2598.183831][ T2725] usb 2-1: config 0 descriptor?? 00:08:26 executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x4) 00:08:26 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:08:26 executing program 2: mknod$loop(&(0x7f0000000080)='./file0/file1/file0\x00', 0xa25ea2a0cafa7ea0, 0x0) 00:08:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x10000) 00:08:26 executing program 3: timer_settime(0x0, 0x0, &(0x7f0000000dc0)={{}, {0x77359400}}, &(0x7f0000000e00)) pipe(&(0x7f0000000e40)) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="140100006d001fe5000710000000000000000000", 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xf) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) read$rfkill(r4, &(0x7f0000000e80), 0x8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/51, 0x33}], 0x5}, 0x1}, {{&(0x7f0000000300)=@isdn, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/8, 0x8}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f00000007c0)=""/237, 0xed}], 0x8, &(0x7f0000000900)=""/36, 0x24}, 0x5}, {{&(0x7f0000000940)=@generic, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/138, 0x8a}, {&(0x7f0000000a80)=""/201, 0xc9}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/243, 0xf3}], 0x4}, 0x8001}], 0x3, 0x0, 0x0) r6 = openat$vimc1(0xffffff9c, &(0x7f0000000d40)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000d80)={0x955, "87c926d1957dee40f8e298e96cf0fbb24f7ebbfde5dc7a747b3af866661aae28", 0x1}) 00:08:26 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) [ 2598.438684][ T2725] usb 2-1: USB disconnect, device number 57 00:08:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f00000001c0)=0xfff, 0x4) 00:08:26 executing program 2: setuid(0xee01) mknod(0x0, 0x0, 0x0) [ 2598.522555][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:26 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xd0, 0xb6, 0xa8, 0x0, 0x2c42, 0x1605, 0x96ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0xc6, 0x2b}}]}}]}}, 0x0) 00:08:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) 00:08:26 executing program 2: r0 = socket(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x43) 00:08:26 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x4) 00:08:26 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 00:08:26 executing program 0: open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 00:08:26 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) pwritev(r0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) 00:08:26 executing program 2: r0 = socket(0x800000018, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) [ 2598.927428][ T1002] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2599.207497][ T1002] usb 5-1: device descriptor read/64, error 18 00:08:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) flistxattr(r1, &(0x7f0000000080)=""/4096, 0x1000) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x4, 0xffffffff, 0x6}) 00:08:27 executing program 0: symlink(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./bus\x00') open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 00:08:27 executing program 5: r0 = socket(0x400000000018, 0x3, 0x0) getsockname(r0, 0xffffffffffffffff, &(0x7f0000000000)) 00:08:27 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x100b, 0x0, 0x0) [ 2599.417860][T13155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2599.447678][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2599.618685][ T1002] usb 5-1: device descriptor read/64, error 18 [ 2599.907225][ T1002] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2600.207211][ T1002] usb 5-1: device descriptor read/64, error 18 [ 2600.627169][ T1002] usb 5-1: device descriptor read/64, error 18 [ 2600.748793][ T1002] usb usb5-port1: attempt power cycle [ 2601.467080][ T1002] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2601.577123][ T1002] usb 5-1: Invalid ep0 maxpacket: 0 00:08:29 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, 0x0, 0x0) 00:08:29 executing program 2: socket(0x2, 0x0, 0x0) 00:08:29 executing program 5: chown(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 00:08:29 executing program 1: socket(0x12, 0x2, 0x0) 00:08:29 executing program 0: open(0x0, 0x0, 0x0) 00:08:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x1000, &(0x7f0000000080)=0x4) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:29 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:08:29 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/88}, {&(0x7f0000000280)=""/202}, {&(0x7f0000000380)=""/13}], 0x10e3) 00:08:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = socket(0x10, 0x803, 0x0) fcntl$notify(r1, 0x402, 0x22) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:29 executing program 4: mknod(&(0x7f0000000040)='./bus\x00', 0x80008002, 0x28ae) socket(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000640)=[{r0}], 0x1, 0x0) 00:08:29 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x1) 00:08:29 executing program 5: r0 = socket(0x1f, 0x3, 0x0) getsockopt(r0, 0x1, 0x2, 0x0, 0x0) 00:08:29 executing program 0: r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x800000000029, 0x24, &(0x7f0000000040)="1f12fbe3", 0x4) 00:08:29 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:08:29 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000100), 0x4) sendto$unix(r0, &(0x7f0000000640)="b1000504", 0x4, 0x0, 0x0, 0x0) 00:08:29 executing program 4: mknod$loop(0x0, 0x0, 0x0) 00:08:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000080)={0x2, 0xba, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0xffffff80, 0x178, 0x0, 0xc7, 0x370, 0x258, 0x258, 0x370, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @mcast2, [], [], 'lo\x00', 'netpci0\x00'}, 0x0, 0x210, 0x280, 0x0, {}, [@common=@unspec=@mark={{0x30, 'mark\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [0x40000000], 0x0, 0x0, 0x0, [@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4, @local, @dev, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @mcast2, @private0, @private0], 0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "42c2f7ce28ef401335ddf6fb395bf4a4d216cfa5e921b6e919ef8a0d6093c6bcee49d7b46af988d8931f15a247cd97ebe28f918333489d8bc10f975c5989ee00"}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 00:08:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r6 = dup3(r0, r2, 0x0) sendto$l2tp(r6, &(0x7f0000000080)="c0b803e48db3b4b8a5754778ba6d2298d45d8669c7a3ad66b431f122cddc21aca265b8ba864f77c7e16d3410b052b82e771e52bd6025f277d12da39738987219ed54c4563eacd78c68bc2781ad7f7fd90f86d57f76d03fc080a8c2d13c325a1d6fe5259e4f7197a2231294b9eb78a18124e18dbbd9db2940f9e191cf374ba76b12c04ac0369b741442c2b044c671f6ebad77caf49ab8e7371537d7ff2a5d3eff39bfad9f2402", 0xa6, 0xc1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, 0x3}, 0x10) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:29 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) 00:08:29 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000200)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/53) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x0, 0x100, 0x5, 0x8001, 0x0, 0xfff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) 00:08:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x89}, 0x20) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) openat$full(0xffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:08:30 executing program 5: add_key(&(0x7f00000000c0)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) 00:08:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x1, 0x0, 0xffffffc1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1fb842, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x1, 0x5, 0x0) socket(0x0, 0x5, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 2602.184650][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:30 executing program 5: 00:08:30 executing program 4: [ 2602.289443][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2602.307071][ T2725] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2602.597003][ T2725] usb 2-1: device descriptor read/64, error 18 [ 2602.986986][ T2725] usb 2-1: device descriptor read/64, error 18 [ 2603.256992][ T2725] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2603.526937][ T2725] usb 2-1: device descriptor read/64, error 18 [ 2603.917741][ T2725] usb 2-1: device descriptor read/64, error 18 [ 2604.038430][ T2725] usb usb2-port1: attempt power cycle [ 2604.746772][ T2725] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2604.836849][ T2725] usb 2-1: Invalid ep0 maxpacket: 0 00:08:32 executing program 1: 00:08:32 executing program 4: 00:08:32 executing program 5: 00:08:32 executing program 2: 00:08:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000240), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0x2, 0x2) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="af", 0x1}], 0x1}, 0x64000850) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$CAPI_INSTALLED(r4, 0x80024322) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) openat2(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x42c001, 0x120, 0x10}, 0x18) openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:08:32 executing program 0: [ 2604.986706][ T2725] usb 2-1: new high-speed USB device number 61 using dummy_hcd 00:08:32 executing program 5: 00:08:32 executing program 2: 00:08:33 executing program 4: [ 2605.096805][ T2725] usb 2-1: device descriptor read/8, error -71 00:08:33 executing program 5: 00:08:33 executing program 1: 00:08:33 executing program 2: 00:08:33 executing program 0: 00:08:33 executing program 5: 00:08:33 executing program 4: 00:08:33 executing program 1: [ 2605.307474][ T2725] usb 2-1: device descriptor read/8, error -71 00:08:33 executing program 2: 00:08:33 executing program 5: 00:08:33 executing program 4: 00:08:33 executing program 3: r0 = socket(0x1d, 0x3, 0x80000401) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x200000000000017a) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c3ffed000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8b1441b1aae44c8eca3800000024000705000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="50dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r6 = dup2(0xffffffffffffffff, r2) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x8, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x80c0) 00:08:33 executing program 1: 00:08:33 executing program 2: 00:08:33 executing program 5: 00:08:33 executing program 4: [ 2605.438117][ T2725] usb usb2-port1: unable to enumerate USB device [ 2605.472618][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2605.559260][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:33 executing program 0: 00:08:33 executing program 1: 00:08:33 executing program 2: 00:08:33 executing program 4: 00:08:33 executing program 5: 00:08:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10102, 0x0) 00:08:33 executing program 4: 00:08:33 executing program 1: 00:08:33 executing program 5: 00:08:33 executing program 2: 00:08:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f1214f9f4070109040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:33 executing program 1: 00:08:33 executing program 0: 00:08:33 executing program 5: 00:08:33 executing program 4: 00:08:33 executing program 2: 00:08:33 executing program 1: 00:08:33 executing program 2: 00:08:33 executing program 4: 00:08:33 executing program 5: 00:08:33 executing program 2: 00:08:33 executing program 5: 00:08:33 executing program 1: 00:08:34 executing program 4: 00:08:34 executing program 0: 00:08:34 executing program 2: 00:08:34 executing program 1: 00:08:34 executing program 5: 00:08:34 executing program 4: 00:08:34 executing program 1: 00:08:34 executing program 2: 00:08:34 executing program 5: 00:08:34 executing program 4: 00:08:34 executing program 1: 00:08:34 executing program 5: 00:08:34 executing program 2: 00:08:34 executing program 0: 00:08:34 executing program 4: 00:08:34 executing program 1: 00:08:34 executing program 5: 00:08:34 executing program 2: 00:08:34 executing program 4: 00:08:34 executing program 2: 00:08:34 executing program 1: 00:08:34 executing program 5: 00:08:34 executing program 2: 00:08:34 executing program 4: 00:08:34 executing program 1: 00:08:34 executing program 0: 00:08:34 executing program 5: 00:08:34 executing program 4: 00:08:34 executing program 1: 00:08:34 executing program 2: 00:08:35 executing program 5: 00:08:35 executing program 2: 00:08:35 executing program 1: 00:08:35 executing program 4: 00:08:35 executing program 1: 00:08:35 executing program 4: 00:08:35 executing program 2: 00:08:35 executing program 0: 00:08:35 executing program 5: 00:08:35 executing program 1: 00:08:35 executing program 4: 00:08:35 executing program 2: 00:08:35 executing program 5: 00:08:35 executing program 4: 00:08:35 executing program 2: 00:08:35 executing program 5: 00:08:35 executing program 1: 00:08:35 executing program 4: 00:08:35 executing program 2: 00:08:35 executing program 0: 00:08:35 executing program 5: 00:08:35 executing program 1: 00:08:35 executing program 4: 00:08:35 executing program 2: 00:08:35 executing program 1: 00:08:35 executing program 5: 00:08:35 executing program 4: 00:08:35 executing program 2: 00:08:35 executing program 5: 00:08:35 executing program 1: 00:08:35 executing program 2: 00:08:36 executing program 0: 00:08:36 executing program 4: 00:08:36 executing program 1: 00:08:36 executing program 5: 00:08:36 executing program 2: 00:08:36 executing program 4: 00:08:36 executing program 1: 00:08:36 executing program 5: 00:08:36 executing program 2: 00:08:36 executing program 4: 00:08:36 executing program 5: 00:08:36 executing program 2: 00:08:36 executing program 0: 00:08:36 executing program 1: 00:08:36 executing program 5: 00:08:36 executing program 4: 00:08:36 executing program 2: 00:08:36 executing program 1: 00:08:36 executing program 4: 00:08:36 executing program 2: 00:08:36 executing program 5: 00:08:36 executing program 1: 00:08:36 executing program 2: 00:08:36 executing program 5: 00:08:36 executing program 0: 00:08:36 executing program 1: 00:08:36 executing program 4: 00:08:36 executing program 2: 00:08:36 executing program 5: 00:08:36 executing program 5: 00:08:36 executing program 2: 00:08:36 executing program 1: 00:08:36 executing program 4: 00:08:36 executing program 2: 00:08:36 executing program 4: 00:08:36 executing program 5: 00:08:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = gettid() read(r1, &(0x7f0000000080)=""/35, 0x23) tkill(r3, 0x16) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) clone(0x3a3dd4008001af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:08:37 executing program 1: 00:08:37 executing program 5: 00:08:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}}}, 0x0) 00:08:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) shutdown(r0, 0x1) 00:08:37 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 00:08:37 executing program 5: 00:08:37 executing program 2: 00:08:37 executing program 4: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='selinux.\x00', r0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000540), 0x0, r0) 00:08:37 executing program 2: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') exit_group(0x0) 00:08:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(0x0, 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x100, 0x168) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x5, 0x23, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:08:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}}}, 0x0) 00:08:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x3, 0x6, @broadcast}, 0x10) 00:08:40 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 00:08:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\'}:}\x00') 00:08:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000080)={0x0, 0x55b3}) 00:08:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x101001, 0x0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="f0", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000040042) fcntl$dupfd(r1, 0x0, r2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x16) 00:08:40 executing program 2: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$F_GET_RW_HINT(r1, 0x40b, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) 00:08:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 00:08:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00'}, 0x45c) 00:08:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 00:08:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x7}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "08dca1", 0xf98, 0x11, 0x0, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5577cb956d9ec04295b22d015b8541cf6322abf80c9f409e2c4bba7eb1c70ff8baa65d6c38380f926d1847590b8e5a0b02b379807fe53ac7056d7ce04b29461ec2f41ca2e70abf0f2afd232f30f117d0cdd7e60d413f16e3226a315a263d6f0fce94f75e846d2a35053dc412fb2665b865f671c04d2ed44fc4a90f96fcb1d1665cc6bc7927a8b72ee22f8c14f55df91c51e1c9333489903c5355bc455bd372a372af7197b021071f5a150d19ac17ea4d1f0055d13bbdecdea34eba79b96b8502a26b9d4a659962591d6943746b8f80130c24051ffe5e627946cd93533c5f873e61961145433581618f8644a84ccb95d46daa16c7d55e3065350705b46ab08d5da2a527a9049c1400ebc26bc0d629b5dd92d51a5739d2c19a9f0c03c00a5307c61e4108efe2f0a3c361ee0e8e13fae4cc950ae3d272e5c3e3c9283c7cee01774f4b5d1ab691fa6d961ccdb0487d6c4345259e9161a658542e964054d01509f526ed3ce2a38ed57c02f154f23d966bf08ceb837f932a513c3aac5803c71436ff4880496fb7dde5c4a7fb2934fb93f8ad45c7d27fce4ad070093c35645fea110d98008fb2452a151a0b2ef5ad2304d2ea9428e7160fb28c830e768367a4bb33792e150c394e3e011217765d52e5011c18024e3acce32e51a83d7c7963007e19c2fa88a45e2990fa0874e3b7cc3a6c6df319d6b689f75284b2a3bf03654f0193f47663fc4c523add415130f597f100dfbd0412108d2e8a66a5e457d109a77bb1aac7cc55d62ed6fa8083d5037af0d778eb2574222d3a3e1aebae3edafc36678b17d92dd4e3904e36d3c202353a0fcb0dcdcb26a903e6c117a11f0ec614ef2ad8e899bdf034fe00669beae1c342b05556d958489835ee42ce73a84dacd2a404a663ab3349efb7cb3ae4a953f3b10f566f4102fbf9caef9d18acca14780a8025d9176f39e37466d909df9b076065945101e2da70e69df38441f93d76604fd36174e2b82920469b7dddc2894b3a9663cb21ecdf2486cc867d1251d7c185f44e96d38375c90ab3f38ce6808a6d098d585d773513dc52d893b321375cc99ffc270ede1065c9474d39195aa40db8cc1d1167ece01376b9cd870f26bce4a0eb6e515d86e16070b05af3c8ecc0c34d9b467436fcc5b6ebd175d48c3974c7516856b74f5fb64dbc8667706fc07c7b3483834901fc5f8484449bb8ef7f9b09ca07eaa4c0596b70704e530782d6188ce17987eb19dfb57b6ed7486ed1c1003bf7e4844c035d1df79a508818dee691d5975c3ae69ee972f9b5171c629c8e1eadd19070a010cebf8c5f16b05be90aafc997c5c187ec681f3c0eca451bbf2e3776dc5c307a9e4627cf1752892bc90043ea91699de63f5101ce3ca8b370ecb9176ee14f02ab99ca6a6c29933eaa6b42ba4c00f581874744184b4748d8fdc4fdefbcc0d16877696a1036a38e9703a8cd2c665177c301faf873394de05600c69c681a911f71d945e11af620af070b89223e3242f2d0706d75882f9a3c948945702a3d3cb09bc48ef9f74d5b4afa06cf95ad577e1da3c32443798d04457ebaf521633c7e99d384ddf572c281d096d59630d1ccfe61f9ea847d5e7e80fe7ddd6e28ba6f5eeb21039dc3a781d144061e685145d63e71d45cc5ef83921ac78bc733c994d0b09492a271b5c2a0cd98a86b98705021e20c9f3baede99e63662fc71738b29bd90acb4eb5fd401dc2c42c845815b18183a1f0c86d1779f6f684d40ccfa3da99196640da28ca2fc35182c5f7eaad0636b61935e581adbcd6566f383dbc3180ccfc40a75a6615eb3512ebcafb207a498f71d2566ba794c45801c40821c44a20aa3c7a14a2475ddb19c59937bd4dd8825b45528823cfb31c03f7ded36851edaf9ffb836406743f1eb513a4d30216fc5fb9846c908f93cc40cd39f34ddad2707f177f77b45b1a135a843d5527f97159a2f1b089bab3a71bd09e97b4e58a5fc531571b76cb2567066dece2fdbf145c92feb080ba5605800627a925346199358dd18963e952824bc7c3d3f188137fa87af44c85433de939fd03a46e5695197eb34791a29ccb160951a4e0934896a7f478b170b371798cdca155070b475b0990681960ffcbe6c10e3ee6f39c0f0651fb28c1340edd14aab8bfe9cb14c348efc0cc97e35fbd2336e26d9682c7c164f6ce573e2a4948592610f809ac21b74d76fe03f1a75534ea00400a11b5dd3a66c4c1d888d9c0c64878a7676aced440d04688ef5f6060357d31c07659ee9d3bb97a2c7d927f9f439be88ab5c3c329a134bf41e5f82bb69af4172644cfaaf623738867b546d43eebb7c40aa146ef6242b5245337db4c03b7a75f01b8cb42999835ae2c83a85576388dc20ccf996780bc46437b6f46c28b8a769ee51f7b0d6dd4e4ce928053597b4e2594d6736094185963c2d1cebebc36227b8bb891192bb177b3fe8c8bc00787c22b735def398ce08b166d9a702fb76f7591b3591729721b5ba9419eb4c58d581d11b3100678089004cb898e8475dc4d58073bc614e9f6a4af5a0276d5dea61419a0de14cbfbf9e8f7888c3f70f3072504871f136115dc705e4b958caf858549460d5727ca01184aa14726789c61923011a07132d72acc419a48caf39f160589961b0eef7d4cb05dd56975bbad4a8ec046ae01fe65fae6bee49c55399b7569fe1d069bbbea9cd17f0e4537c2886f734e439dff21e5bb1c8899f0030cd593109e8beb67021dbcb3116cf0979bcc13a3d8ea4ef2012b74bd0c63be5d4fcb18cb2f2c1a0a5b25eca500abafc74f01a7c2c13f994fa821079de93042d51c74c06f45f0d62297892fb0e0a70213b3bdd2eb8e52f78289cbcc1c8a9f9f63008930a061b57b11b980c05ea68ce4decf704e2976baaf5d7ad3ea6990b384640482d10b1f8b313128c9c9584d39c8c8b5be777132ef3fba2fb9bc9f427f9f7d04f0f1b688ae8163c068781123db57ec0da610854130071b860ebd9d275103325f49d0707f54bc69312c924f8f9a8a19878b8275b2acdd0d7c85f01471b2dc27cce9d783c7296ccf0a08122c9dfc6b8a592b32daaee82d56a5cda07a1bd5d307005b52204996bc35669ca49f6d58e088e25c4603561bcdabed6c0c59eecae71d052e4bb2e774c2c9b7c4ee9e5e3123004337e6df662333405f2ad0e2c88424077c85e5d6be7903a3e0ff1069d0ae64961cf7c0c426ed4fe7db52dbc94926552e976c1359240c14f45213235cd8c0e31ad2474bbc3ae8546031248e2e238b4b876f12c9c9779c4f75d0db7802c304766632b33f172d9b06e9c241f58ac00128555475c5ff436e528d9969469d1a58dd29ed24a8612c1a51ea8ae9da836cdd1cf6a0c32368a262e327220e175da1e2da91c6d5161dc87690828e2b1336eed99cf0ef5621969f638af1d9688fd90bfa4f0ba8cff0fc885e3880301fd4927ae981e839eea08c10bc3f4510a6d5eb1b530c5ba371ed9231fa17ef0c8158e629a613d4280861cfa9711aad292a1c5a2f4840a2ca5fad0c099586b13fb2ab9d82ea966c9bc8a1e4fc6cbeff2afc0c4ff11dbbf68fdc09342a5c782589ac1b9903d0b1617ba0186f50025452059815ed3649bde0fabb0ffc33730e262fc6d03fc0971e22d5eb127ae844f2bf861dd99ed9c3529a8916e59af910dbf796d879613305e992eaf322850803bdae72f202d631d214ec13276144423ae0dc595585c13cb9cbedb32dc51a26a73c0b6b4b38810051abdc66eefc9a2341c05e0b0c77b8013646df14a7d03598f9a7c94c47736060b7a242af56d76475cf1dbaab8607c258ab67440caa86899b19b1f8e8a821086dd2d59f9e4a63f1cc27c7c553de440d3c2e856b9583e25cf6fe53591baed0e870b3bfab5faa7e147c767e8723193e8e1d0b700d9ca1d37425665480c951df4999ee74ef97de9340dd29c354bcdb661825c424cc41e20c52cad691dec22e3b78f1e46993cdb1a36e7b2dbe41be01f1f4b81d66c30f366df771064cc5fb0e652e70e397515abcca789e1b8541da66f0a212fdcacf107efda413fcb4ccf6b7425a1fa7abf68aabc7497257fb99014ecb5c0c86f0bc5826808550673f42ff7ca25e822fc49e24feea00027b076d3ff9695c1c5bd91aff30a8643662b79139730f3abc879c898253bf0dc0afe37a1b31d24361990d06c875461ac2c85ca713f223121b35d55468b50ba293fd043cd2c32b9dd58ac98662b1b30664af4ee9c36b3be5e016b05c30ab91bac38770d1742ed5cfb21da4af0181311d88076857ffa2f24a885c1728dd8d9e6bc26de68490adf44a332bd6aece386aa40d0c7ee40b92c6816b321fd83e3f744e4ce2c5ae601b14652f15b8819c3f814cdf95dad76bda5c214cf8c03112bc42678cf7c77c7896abe8190750331a0ca1c6e55d1ab04dd6b6e1bfdef45aab29a318009c223e790240463ac11927a6930b275bd6b9f121173bf1a5ba67fb675822b3f86e8d5f09cfbc62e5a0429a893779c244f52a9d7b0988332f6ee66231e4cba175126a5e69b2e44240961a777ca4e8c7117e4e567c2e1804158675102e29c99855b3a4a60c99b36fdbd71388823ddf2259cff86f881b543bef815730655f5bd658250d49f64b234d1c36f5d4f410d13ab47b50cd28e79f467764505405e8e5a6dca5b213ddf7755ae5ff9013c3540739857456df2cc1a6522d18bb64f9323a26dbc4d1c2c24f9ff2aff0adb55c209c6b3ca03bd14d30f39518eec1183c1a540dc34e2d0df0aa68692ccd065cd2e62077dde17880de47e035d68de6e811ad4d7ee0a8b1d79ba3feecb5e49b463cb77c6dfe926ae46ca47b423a9454e6d959f186450a186803131be41f0c7d7721d55f93ba4524786d7efe2d568d01ad5753b007edda46f4f47bbbab30fa3e06d12f98df9e39df5105ac0cf3e9ec9c951343fe5b2f0d075fa5377a148b1632cd46bebf19ff84f6a422bef8458f907548876c3dd1ad513d2858e1776097c89c56711dc392490fb646ccf575dfc4b8b08838a31ea1da97f56c0f0b3af0df846b18c94c03a87f295cd60601198080bb5408c8df06ab2689b139a2585f7bdce69f1e26ac38aed61abe953dfe358019604cde60eddb6ff2bd81a00022f0b5a2cd8dd2996d27dc052b962ca0f2e4e0c533e5e3da7151e2d5c466192ec2922351ad3ca5207c514a7b6f9cbd6a52256a1ed5bcd975b0f5c950b430db0f7119aa67f325f1166a96c11c1fe184325f3468ecdf3d8023743cec8b71c19d1f09570724b6c02ba9f91a9564f89a84dbbb5d7b7a3544d9207447996bc078485355f247b5030443382e6b4a21d8fe3876d1391fdef301aa256962b7787ce40073df21dde5d23afe8ff13e82d6c7eea831e12496cf7e3ade4b3ccf48a4a36e2ff9a137b675ef203d2d117a202028fe618a270f508744a4993282e4596c23df597fb960e567a443d6469801507b2ee93954f6844efd3427047d828290c3d364a4e0514b51b70f3530ff42289fdb437aba979f697829f31183bb8f13f471b73f7424264ddae06547b937e1bad7672c9382dac524bf3c1d1225e75aa32d1f4d225f0d0a54d55abc8b090a021c22698c858e0c03163289290b621b6a686a1f491de22e9ac86125f32c006"}}}}}}, 0xfca) 00:08:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000080)={0x0, 0x55b3}) [ 2612.691892][T13482] device lo entered promiscuous mode [ 2612.700977][T13482] device lo left promiscuous mode [ 2612.764749][T13498] device lo entered promiscuous mode [ 2612.924369][T13477] device lo left promiscuous mode 00:08:40 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) 00:08:40 executing program 4: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) 00:08:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:08:40 executing program 5: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') sendfile(r0, r1, 0x0, 0x1) 00:08:41 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b52, &(0x7f0000000080)={0x0, 0x55b3}) 00:08:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/187, 0xbb}}], 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r0, &(0x7f00000002c0), 0x347) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_cipso(0x0) 00:08:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000080)={0x0, 0x55b3}) 00:08:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="f642ad0f8dd0", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 00:08:41 executing program 4: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 00:08:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x0, 0x74, 0x8001}) 00:08:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAMEAT(r5, &(0x7f00000002c0)={0x7, 0x4b, 0x1}, 0x7) openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x100, 0x168) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x5, 0x23, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:08:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x10, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) shmat(0x0, &(0x7f0000004000/0x2000)=nil, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959a2f8d4cb0baf48ba8a8d24a25bf5fa47d295fb6f4069a18e796f5684f6d8047c72d698747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6", @ANYRES16=r2, @ANYBLOB="02002bbd7000ffdbdf250200000c080002312836c0b42097931c21fdab5a1eb3e475f2"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="38020000", @ANYRES16=r2, @ANYBLOB="020028bd7000fbdbdf0000004c0004800800020003000000d5000c80e40004fffffe000000000000fff700"/58], 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c010) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000013eadca4065d99ad7cdb3c37ab60ea42c17d1f4556290686e833613c69010b0dbf0deeb202cfa4be092eaaf2142f7974f7c1f988377bdb0307c6804b4f589d214017c5217cae84989241b08e8ed62157eb51c25fe000000003bae4c88bad50000000000", @ANYRES16=r2, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4004804}, 0x20044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1aa9247c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45877915}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x210e8a55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27a81bb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3210e638}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ccc0d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eab1319}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b858bd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x90}}, 0x20000011) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x280, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x22c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea4d43f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75a101a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285c5434}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4222d9a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5feef0fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b1d129d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x99c7e9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a3d50c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f63f58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x800000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x350bfc88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eb9f395}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71a9178c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x102df99e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ec0d6a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55a43124}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x315006be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69e34c7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b06caaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b57a7b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fe25b28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69df65b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bc2693d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6126ce13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38a7b340}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5198aab8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a40d65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x418c0106}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x201f41e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x160c1307}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cfdcc6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffe}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x38}}, 0x20000040) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000040) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xffeb, 0xb60, &(0x7f00000001c0), 0x10) 00:08:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/187, 0xbb}}], 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r0, &(0x7f00000002c0), 0x347) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x800000) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 00:08:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 00:08:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000000040042) fcntl$dupfd(r0, 0x0, r1) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 00:08:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) sendfile(r0, r2, 0x0, 0x80000001) 00:08:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) 00:08:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x40002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r4, 0x0) [ 2616.075350][T13555] Y­4`Ò˜: renamed from lo 00:08:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0xa}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001840)=""/4099, 0x1003}], 0x1}, 0x0) shutdown(r3, 0x0) 00:08:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) socket(0x21, 0x2, 0x7) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', r5, 0x4, 0x1, 0x81, 0x5, 0x44, @local, @dev={0xfe, 0x80, [], 0x20}, 0x8, 0x1, 0x1000, 0x7}}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x15, r6, 0x1, 0x1f, 0x6, @dev={[], 0x19}}, 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2616.284442][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:44 executing program 0: syz_emit_ethernet(0x52, &(0x7f00000002c0)={@random="cd3997030f00", @empty, @val, {@ipv6}}, 0x0) [ 2616.354707][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth1_to_batadv\x00', {0x80000000}, 0x2}) 00:08:44 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 00:08:44 executing program 5: syz_usb_connect(0x0, 0xf9, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0x68, 0x60, 0x8, 0x82d, 0x100, 0xf2a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x98, 0x18, 0x7e}}]}}]}}, 0x0) 00:08:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/seq\x00', 0x800) read(r0, &(0x7f0000000080)=""/241, 0xf1) [ 2616.577218][T13596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2616.638468][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 00:08:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setown(r0, 0x6, 0x0) 00:08:44 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000d80)="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", 0x2c63) shutdown(r3, 0x0) 00:08:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="14000000edc51f0214f9f40265b2822df819071f61c4cde04b111557400486a9763b5b867dc2ee8838ab182a5b821f3023e0eecf09f8c3fc7017c1a1c1aad50ee627d0cfef2d822ce54f9119cdc92da1c5031a068e11f7c1123f9beca0c5e74830e812a29390e597079d2d45a67c01dd6fc8526e56fa8479b8b3c58c5b68993eb6bbde9275dd1915f017e684b33d4cde79579f51836c002b407ada21e5a0df8b3b185cd66bb9db430523eb289770f2f37fa8a5b7", 0xb4) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000000)=0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$NBD_DO_IT(r4, 0xab03) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 00:08:44 executing program 4: r0 = socket(0x40000000002, 0x3, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x8}, 0x8) [ 2616.955733][ T1002] usb 6-1: new high-speed USB device number 116 using dummy_hcd 00:08:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}], 0x3}, 0x42) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r4, 0x0) 00:08:44 executing program 1: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="8202"], 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 00:08:44 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @val, {@ipv4}}, 0x0) 00:08:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4122, 0x101a}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f0000000100)=""/148) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000080)=0xd5b) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x0, 0x5]) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x8000000000002d2, 0x10122, 0x0) 00:08:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}], 0x5}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r4, 0x0) [ 2617.206226][ T1002] usb 6-1: Using ep0 maxpacket: 8 [ 2617.350308][ T1002] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 2617.359416][ T1002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.644179][T21777] usb 6-1: USB disconnect, device number 116 [ 2618.415445][T31462] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2618.655422][T31462] usb 6-1: Using ep0 maxpacket: 8 [ 2618.775629][T31462] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 2618.784902][T31462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:08:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/246, 0xf6}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/87, 0x57}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbba, 0x0, 0x0, 0x800e00535) shutdown(r3, 0x0) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="000200bc0f"], 0x10) shutdown(r4, 0x0) 00:08:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) shutdown(r3, 0x0) 00:08:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltclass={0x44, 0x29, 0x218, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x12, 0xffe0}, {0xfff3, 0x7}, {0xa, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xa1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x81}}, @TCA_RATE={0x6, 0x5, {0x8, 0x28}}, @TCA_RATE={0x6, 0x5, {0x20, 0xf0}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40001) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/4, 0x4}], 0x1}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x2ec, 0x0, 0x0, 0x800e00596) shutdown(r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x0, 0x2}, 0x10) shutdown(r4, 0x0) 00:08:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}], 0x6}, 0x40002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) shutdown(r4, 0x0) 00:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0xa}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001840)=""/4099, 0x1003}], 0x1}, 0x0) shutdown(r3, 0x0) [ 2619.045901][ T1002] usb 6-1: USB disconnect, device number 117 00:08:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="77bba0c772da0d0cc4ec80f4e5458606fe5e13d9e95151453d01980038e48d9bcdda526049cade786f37b1f64ab1e9cf95967afde6edf83429a0fd1d67474f97adcb7fc90c542635c6ed15fe60c2b5932f7070560e9d73774a774bf6da2ee634f33df96fc34157a62b1245b0bed72e6c9d28c32cc8063026af098672a317a83c172edeb20cde5051521d65a3d908f0382e9ff8c4f29a2c27844c46d871a0666c8af40d35800fb378c54382f7e77ee0681fce52fc29f4643bc645bf5599d595e01ea61368b3bb40", 0xc7, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x95000000, @dev={0xfe, 0x80, [], 0x2e}, 0x200}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000c14000825bd7000fbdbdf2508003d0005000000080001000000001339adab1bed8219000800830003000000080003000300000016b4aa103d2bfff9be80bb60ee81ec08646227cda03e0fb753997c392cc059e3e00917cd22d7aa"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="000000743d000000280012000900230076657468"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1410, 0x20, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x459}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20c1}, 0x44001) r6 = openat$nvram(0xffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x2a2a80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r6, 0x4010ae94, &(0x7f0000000380)={0x610, 0xfffffff7, 0x5319fd31}) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2619.244451][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2619.271764][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvmsg$can_j1939(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/144, 0x90}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/250, 0xfa}], 0x3, &(0x7f0000000340)=""/99, 0x63}, 0x2000) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) socket(0x27, 0x800, 0x7ff) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x410, 0x4, 0x6, 0x80, 0x3ff, 0x8001, 0x7, 0x7]}) 00:08:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = openat$dsp(0xffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x204200, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x8) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x6) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/172, 0xac}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/232, 0xe8}, {0x0}], 0x2}, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e006c6) shutdown(r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) 00:08:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000100000000004000000000c40000000000e30652362aeaef0cea7857055d0488f6e6b0028e", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="4ddb3468eaf816ad25726c9bf854405ca3acb796b22ca57ff6f56fe989f493e66a0915a90ef9b520d55e651cb5fc731d2b1f292794cddd20da95352dbde440b35848a1df60c0ff292ae5832beea34632d3a87bde8acfff98281ece29552db7f7a023188f608e21a4a00e2b819473762b3e3331373a6df50fad02da986e5cbbce9b58e8014d41631eec00211af6a2eb8465bcbfbb78f8377a6dfc0bd76c782b879011ebbda203fa8d6a958d8d66cfe2c22068401836bde2ed8c27570a8917a633981acf22efc8abb9"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r3, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x2c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}}, 0x0) r5 = openat$fb0(0xffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r5}, 0x7ff, 0x2ad5, 0x4d}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r6, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000100)=""/224, &(0x7f0000000200)=0xe0) 00:08:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/172, 0xac}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/232, 0xe8}, {0x0}], 0x2}, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e006c6) shutdown(r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) 00:08:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/223, 0xdf}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/66, 0x42}, {0x0}], 0x2}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001280)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) 00:08:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/150, 0x96}], 0xa}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001840)=""/4099, 0x1003}], 0x1}, 0x0) shutdown(r3, 0x0) 00:08:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x10) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x1204, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/172, 0xac}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)=""/234, 0xea}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e006c6) shutdown(r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r4, 0x0) [ 2620.082101][T13780] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2620.138106][T13791] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket(0x25, 0x6, 0xfffffe00) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x52}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x8000, 0x3}, 0xc) r4 = socket(0x10, 0x3, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000240)) write(r4, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 2620.515369][T21777] usb 4-1: new high-speed USB device number 57 using dummy_hcd 00:08:48 executing program 4: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {0x0}], 0x2}, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r2, &(0x7f0000000d80)="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", 0x2c63) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000d80)="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", 0x2c63) shutdown(r3, 0x0) execve(0x0, 0x0, 0x0) 00:08:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) 00:08:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) shutdown(r4, 0x0) 00:08:48 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000000c0), 0xc) 00:08:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="8cbcf91ed32b7dbd648320004bfec1dc584a96ddfbc8f7bd0e8083fdaa195b6f38509c0320e57615f3fb257110d0aa5da4e3d803e88467f8c3fe3385eb49c57573db7f9dd92d2518496466dd1554c3e1ae4c5ce7e803152f30271741a7a0bcae28401176ef9fb970fefca8eef9c18e02d20b0a074951039b0c7c23aab4e78894047bdc304c0ee3a5e28df7131293a9acb31175e8f06d867bca9fd9833d1dd270d8357388d18d74d697b5bd9a8e46426ff20c42833fa12eca9a1baddb9963c80e5862d533c6ea4f07a0d0a7ff2b947e43c66eefb5c041b2adc37aaba476cabe4dd1", 0xe1) 00:08:48 executing program 0: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 00:08:48 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/230, 0xe6}, {0x0}], 0x2}, 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r4, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r3, 0x0) [ 2621.092007][T21777] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2621.103710][T21777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2621.123719][T21777] usb 4-1: Product: syz [ 2621.134522][T21777] usb 4-1: Manufacturer: syz 00:08:49 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000240)) [ 2621.144587][T21777] usb 4-1: SerialNumber: syz 00:08:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r4, 0x0) 00:08:49 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) munlockall() 00:08:49 executing program 0: pipe2(&(0x7f0000000040), 0x0) 00:08:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x18, &(0x7f00000001c0)={0x20, 0x30, 0x12, {0x12, 0xe, "60ac4a849f6910975d658287bc2f328b"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x4, 0x1, "409ca2a9", "45250307"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x9, 0x9, 0x1, 0x36, 0xff}}}, &(0x7f0000000780)={0x44, &(0x7f0000000340)={0x20, 0xe, 0x67, "76dce03784464237ec81df56dc5d598e13561a89f3b7dab976f3fee4f12e2e737bafdf117db9409d3564556fc56090aa19c958fb8b17ce992539c6ef7432590c9aded14b24343d6556a367fa0f3a2cf3bbaaf8e58e54e212ae0ea3405735578170be8244a8e55b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x40, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'wA'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "a86c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x87}}) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000001}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040001}, 0x80) 00:08:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r4, 0x0) 00:08:51 executing program 4: r0 = socket(0x1c, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) 00:08:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001140)={&(0x7f0000000040)=@un=@abs, 0x8, 0x0, 0x0, &(0x7f00000010c0)=""/88, 0x58}, 0x0) 00:08:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 00:08:51 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17f7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs, 0x10) [ 2623.232824][T21777] usb 4-1: USB disconnect, device number 57 00:08:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) shutdown(r4, 0x0) 00:08:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) 00:08:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001680)=ANY=[@ANYBLOB="1b5b073b00323400000000000000000000000000000000006d"], 0x78) 00:08:51 executing program 4: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x80, @local, 0x101}}, {{0xa, 0x4e24, 0x0, @private2, 0x4}}}, 0x108) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xb3c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_TAIL={0x83a, 0xf, "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"}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, "2f43914e8d97f06a5a8cb780ef0ebc68d386aba88f2329278889d6e2a4ef9b010512479ba7f275"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x1000, 0x0, 0x5, 0x1f, 0x6, 0x3f, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, "ab1b71"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5b, 0x6, 0x8000, 0x8000, 0x9, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5b, 0x3ff, 0x1ff, 0x2, 0x4, 0x2, 0x7ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1f, 0xe, 0xef2, 0xb3, 0x62d, 0x0, 0x6f63]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "b1ea9c832c6942c7ef843c5de8932215f44f4c9205fd3f95ba93852cdd91c7"}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, [@NL80211_TXRATE_HT={0xc, 0x2, "beda18dd36da4287"}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, "d25edc05406e11c799e784a35560105810c6a4925fe3"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0xd94, 0x8, 0x0, 0x8000, 0x6, 0xea14]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "81"}, @NL80211_TXRATE_HT={0x3d, 0x2, "a8b21b7cf9132aa4100952e73c0de7266cf5841436d56fecd6d6d7e143096d7d4b729430bdd87cf58774638fdf23bfda6511b8890d3aa1f8fa"}, @NL80211_TXRATE_HT={0x3e, 0x2, "0daa8af100f3054dc4bd4f1c9e8ad2cb5132dd9ce765d23872628259637e66888299d3b1d2cdec0f56439092ba9e1d7c251f37d62265fd0c8446"}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "e3201950a2fdfc58cd2797"}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x1, 0xfff8, 0x0, 0xfffd, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, "58b852060b3c876649dce7deb5397b5d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x6, 0x7, 0xff, 0x7ff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "bb2d2a7b88dfd99a7728454bd9"}]}, @NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, [@NL80211_TXRATE_HT={0x24, 0x2, "553be770723bf9670f2586c5171b2ed474d408f5f5911a1309b7e207a5610c8a"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, [@NL80211_TXRATE_HT={0x1e, 0x2, "d687c197bd7250b68432f03ebb99ce7696f8b77131f974d889bb"}, @NL80211_TXRATE_HT={0x51, 0x2, "694902ba2728ed805815c4aea5e4aed52a07c2ddf91496bcfa537ec45d21f84b22e256bfa1984c41cfdf8c58d26656e7852e85e6805054efbe147d6235a4c8f6e4cb5c7cf35cfd4b314abbbd2c"}]}, @NL80211_BAND_5GHZ={0x14, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, [@NL80211_TXRATE_LEGACY={0x24, 0x1, "d1f66cc6183a032b4abd1ff1fe360312ed7424c18f1bf92c0f81e8c03ea756d3"}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0xb3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) dup(0xffffffffffffffff) 00:08:51 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x51) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r1, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) r2 = open(0x0, 0x14103e, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@private2, 0x63}) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000280)=r3) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'geneve1\x00', 0x1}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) 00:08:51 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x10104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @broadcast}, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f00000001c0)={0x3f, 0x8001, 0x2, 0x20, 0x800}) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r0, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) prctl$PR_GET_DUMPABLE(0x3) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 00:08:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}], 0x6}, 0x40002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r4, 0x0) 00:08:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) 00:08:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/78, 0x34}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}], 0x4}, 0x42) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) shutdown(r4, 0x0) 00:08:52 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8020001) 00:08:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x10104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="34e7ffeb0600000000007f8c8b4b5cb62fcef10fa18d15eeb8afdd03730600002406efc3b9e878c62000e2009356df78a9005e00000000000001263db25ab750150d2bc1bb2565b50e2e085b4791cf387ff583b36bb932b0e1605bf4978412a96fe5555ead2d0100bef8736532a0ab8f0d2dae3ca18261ee7cb9d95853b18673da7c6ebdebead412e5da4091efebc1a002d415ea890c427acce34d58be4f0e4ab21ecb05c5dcc1c0eb949feeb29821a3d1dbbe7ccb5792ffb2dcead128d48f03c07d65fae331883a54faea1a13e1aef861947c9187de3170922601fd6d2e00fe4f9dad85cdb10c5ebdefa64fe1d3d23e1f49058f7f8e7ec1633f91ae6339780962d415757773ddbe9ece85f4c969fbf425a4d9c43fe89b79f714a723f519be2f02b91ab34f09f5887c4be0f819eb56a4c14c1ffd52d6747d1132f784908fe34164089c3328c4c46fa6142ac6d2be1fe461604dcdb28ce4014a902fbee5b0c622a695e857f14f57ec93078b9ab19aa046eb0b9d585a3aa77d211b160000"], 0xe) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000001c0)={0x3f, 0x8001, 0x2, 0x20, 0x800}) sendfile(r1, r1, &(0x7f0000001000), 0xffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:08:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000340)) write(0xffffffffffffffff, 0x0, 0x0) io_getevents(r1, 0x401, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x3}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@private2, 0x63}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) 00:08:52 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xaf0, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_TAIL={0x83a, 0xf, "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"}, @NL80211_ATTR_TX_RATES={0x298, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, "2f43914e8d97f06a5a8cb780ef0ebc68d386aba88f2329278889d6e2a4ef9b010512479ba7f275"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x1000, 0x0, 0x5, 0x1f, 0x6, 0x3f, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, "ab1b71"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5b, 0x6, 0x8000, 0x8000, 0x0, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5b, 0x3ff, 0x1ff, 0x2, 0x4, 0x2, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1f, 0xe, 0xef2, 0xb3, 0x62d, 0x0, 0x6f63]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "b1ea9c832c6942c7ef843c5de8932215f44f4c9205fd3f95ba93852cdd91c7"}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, [@NL80211_TXRATE_HT={0xb, 0x2, "beda18dd36da42"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0xd94, 0x8, 0x0, 0x8000, 0x6, 0xea14]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "81"}, @NL80211_TXRATE_HT={0x3c, 0x2, "a8b21b7cf9132aa4100952e73c0de7266cf5841436d56fecd6d6d7e143096d7d4b729430bdd87cf58774638fdf23bfda6511b8890d3aa1f8"}, @NL80211_TXRATE_HT={0x3e, 0x2, "0daa8af100f3054dc4bd4f1c9e8ad2cb5132dd9ce765d23872628259637e66888299d3b1d2cdec0f56439092ba9e1d7c251f37d62265fd0c8446"}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "e3201950a2fdfc58cd2797"}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x1, 0xfff8, 0x0, 0xfffd, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, "58b852060b3c876649dce7deb5397b5d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x6, 0x7, 0xff, 0x7ff, 0x0, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "bb2d2a7b88dfd99a7728454bd9"}]}, @NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x78, 0x0, [@NL80211_TXRATE_HT={0x1e, 0x2, "d687c197bd7250b68432f03ebb99ce7696f8b77131f974d889bb"}, @NL80211_TXRATE_HT={0x51, 0x2, "694902ba2728ed805815c4aea5e4aed52a07c2ddf91496bcfa537ec45d21f84b22e256bfa1984c41cfdf8c58d26656e7852e85e6805054efbe147d6235a4c8f6e4cb5c7cf35cfd4b314abbbd2c"}]}, @NL80211_BAND_5GHZ={0x14, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, [@NL80211_TXRATE_LEGACY={0x24, 0x1, "d1f66cc6183a032b4abd1ff1fe360312ed7424c18f1bf92c0f81e8c03ea756d3"}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) dup(0xffffffffffffffff) 00:08:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{}, {}]}) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r1, 0x100000001, 0xfb7d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$cont(0x7, 0x0, 0x200000000000003, 0x1) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ftruncate(r2, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) 00:08:52 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x10104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0xe) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:08:52 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) socket(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) dup(0xffffffffffffffff) 00:08:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) io_setup(0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000300)) write(0xffffffffffffffff, 0x0, 0x0) io_getevents(0x0, 0x401, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) 00:08:52 executing program 2: clone(0x9482d100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace(0x10, r0) 00:08:53 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xaf8, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_TAIL={0x83a, 0xf, "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"}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x1000, 0x0, 0x5, 0x1f, 0x6, 0x0, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, "ab1b71"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5b, 0x6, 0x8000, 0x8000, 0x9, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5b, 0x3ff, 0x1ff, 0x2, 0x4, 0x2, 0x7ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1f, 0xe, 0xef2, 0xb3, 0x62d, 0x0, 0x6f63]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "b1ea9c832c6942c7ef843c5de8932215f44f4c9205fd3f95ba93852cdd91c7"}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, [@NL80211_TXRATE_HT={0xc, 0x2, "beda18dd36da4287"}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, "d25edc05406e11c799e784a35560105810c6a4925fe3"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0xd94, 0x8, 0x0, 0x8000, 0x6, 0xea14]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "81"}, @NL80211_TXRATE_HT={0x3d, 0x2, "a8b21b7cf9132aa4100952e73c0de7266cf5841436d56fecd6d6d7e143096d7d4b729430bdd87cf58774638fdf23bfda6511b8890d3aa1f8fa"}, @NL80211_TXRATE_HT={0x3e, 0x2, "0daa8af100f3054dc4bd4f1c9e8ad2cb5132dd9ce765d23872628259637e66888299d3b1d2cdec0f56439092ba9e1d7c251f37d62265fd0c8446"}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "e3201950a2fdfc58cd2797"}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x1, 0xfff8, 0x0, 0x0, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, "58b852060b3c876649dce7deb5397b5d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x6, 0x7, 0xff, 0x7ff, 0x9, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "bb2d2a7b88dfd99a7728454bd9"}]}, @NL80211_BAND_2GHZ={0x30, 0x0, [@NL80211_TXRATE_HT={0x24, 0x2, "553be770723bf9670f2586c5171b2ed474d408f5f5911a1309b7e207a5610c8a"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, [@NL80211_TXRATE_HT={0x1e, 0x2, "d687c197bd7250b68432f03ebb99ce7696f8b77131f974d889bb"}, @NL80211_TXRATE_HT={0x51, 0x2, "694902ba2728ed805815c4aea5e4aed52a07c2ddf91496bcfa537ec45d21f84b22e256bfa1984c41cfdf8c58d26656e7852e85e6805054efbe147d6235a4c8f6e4cb5c7cf35cfd4b314abbbd2c"}]}, @NL80211_BAND_5GHZ={0x14, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, [@NL80211_TXRATE_LEGACY={0x14, 0x1, "d1f66cc6183a032b4abd1ff1fe360312"}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0xaf8}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) dup(0xffffffffffffffff) 00:08:53 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20004000) dup(0xffffffffffffffff) 00:08:53 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/244, 0xf4) 00:08:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000340)) write(0xffffffffffffffff, 0x0, 0x0) io_getevents(r1, 0x401, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x3}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@private2, 0x63}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) 00:08:53 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001600)={0xb2c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_TAIL={0x83a, 0xf, "33d56bba967359101889fea2556c583167e97363cefc96d6f3f663bb59f1c089a6e296730eba527f7f91dc88a9f6eda59398b792467a16264ab032d0c13a9f7920a0beed34774061931f9f301863cae26557a46738c9de58b1d936e535c5d2833424149b9be171e9d6e0a5fbadc3d521a373e8474be6009db944027bbba0995ff5163cfd1bfaaf21d101931d0fdceb5e440c697cceffe7484e2e4f96c6b0c19fa9f104ddf53a98f8deafed76959362b74ee3de68c97f02dadf9387c15539e72f50fd61da5b9676238d3eb3d092c320d5d14d86b914b375eaa2145ca12eb5855d481acb0ad01ce6ba704d466d4ec309279dcad200e6e40448b7d5882f79313ef12e7333c94df4ad4ee2c68cd62f568a4da962e3f9171897413da07aa8edc3bc75e157504d1dbd632b39e9eb5792e562cb7b5e2786970314403d58f77fa0a56f1e46a8321dd104ead6b2e91409cec0d94f01d0c61ebea43952a905f9cb5c319828a5539d86f836c6dc1a84004f990488021ede5f837ce601a517a95c2e486d950299e17727fc67eb3940e429c46b4bb6ee562bbce7d117da46558f562b4befa325e667def1a8bffd9dc82c64d9a2ed05cbab78e2af612361125ffe51642ca205dbbe7b6a5b39a3c9f3af29ed9e4728ab7d91375367c6493ba8100c275592b47304ac6c41f84e7d5c8454a0ed45a19884568702eb5c5da23c3be71cee9e01a1f776b386b79abf781c05f0e980f8adb80d685735a93cdb99975f5cf376f16bf2b49329264d962db341ae17f9d69481cd0a91a456cb9789c8109b345cd5bc06e3d73dd5a9922c4ffacf96e9e33ac1bc5fc5fd921b4df35b0269391c2a46f05315f70d246c8b5d9218b551dca7a74e38b563001218b76c838e0cb9d37e405a415a8e2fe5b4516d3dce658136f33106243612289b5174bea1128d35ea73b5ebff0bc4d78f1519f15e11796d65f5c06e8f16d1097d8bcf17bb8718af77fe11999f74703af0bf147e90d30c38f205fafe2702c4a94ea6c3b6423a418338b1a4a83fe187a193cd356f62756a0caaa42936327e12b71116e80ff736c5abb3a336b4f562372d488bdfe197f69b1bebd49383316358455a91ee801ac253fc9978aad63294e75d65b90f05d352bd259e0fc309b58bc785e1b0df6249a29de3c3749b054a072b53ac6f619cb3708380e97bca23800f0b7407a8aa78105443866b7113b4f2fb51f471c6e49be809504b00a9007647de62a06f0865a2752a5af3f2564f9512f52b44576266d429e6ba46a3bfd6d23fa325098d0c3be971520fa3d92d73d2ab945459d1ce6e46c38ce9401fff7c84abd95ac5a85534d895986422725fc11da0283e775c1a11c74d81643333774eaa9e27778e184f429164917824e14f33426cbd055e8bc6cebf1d2d738167627610f4f5cfdecc50b506873cbbc09c00d07526d6a4f81ff00891cff5d48dd7177dd8a1fb2ee3a62a3a4104f808fa193d39bf26373e17c1c4ed2824e3b502258717f1ffde127895b920d64e0efbcd31c56556bd289074f122a82ee0a627f284b0b93d9dcf5eb25597ccbe3ef0ac6a9dd719cbc47786befbbe4269f12d5a346fec6ac06d0063a8291a03bf357f68ad3f779b6b68fb728cc6bd9e9356b7d871edc9ebd1631d86cf9b23f9f09d3981eea3787cddb516e0fbb31f398ae440e8f98714ef2f317192e7741fc1ca482dc5066a65efd099a2e67f3133b3c6f04bea40ca1aaef9d203285090148695565a3b38b274d18f052c565c4269bc7f60ca13af18135557787fe5a0afff846fd1ab635df51d4d761bb8cc5ff3e541141800aa21b65d6e5f8bf7df2183ee07c318e7a44b8ce9b01d4d11351ea2baa8ca151031fbff143c61c1eae08cbe847b30636567eeb4c93056d3867fa546cb28824cb91ba5725bfc97d4cfe0a28bda32a064a551da96ba64af9fd5fca63e357964b5da0b983e305b4b2e1dbde150ea3f5c2b4429f3ac1ac29c55545ec9613920d712f2a406bd038050f63080533ca61fe836f49b9be588ce35d88f70333ffcbfad6020b96b6a6d9bfcedc18be8a35d984adf27c7536b9ac8e12a826603ad58baaad39978c6b06adb36affb43568797d628f14a3fdd971ab0c0eefd4880b3f6e8af7b10a0def7894611332a36e4697d532dd16f6eecdd8be501ebccd8b76e1d4548fbbbeb825c72a1f94f757e74b427bdd7ac7d231c81777a0f87ca6e3c3b95b655447d1bd8c3da944f44c49f4e6de44b0d5c8d34124a3256a81ec6486b538c43985dd6e7cf512bd9244ba3654bf6fbd2afbf087ab7a642d1226d79c8ff92936b0195383329f1149306abceb8a3d178777d5cbdd425d578f081836c357ea53d126340e1464f7ac40bc27b67cdf48282106ee50dc0d6cc22593d7887a57276e5d4ff8e5de71f4c9fc56c043742c6cb0cbbfe9d0c8a574284386074737f86a7e5c78977395c363fd55b35e28e2b8f1eb118f0293b46b83d4bd6443121870913262a2de0c9bc2ca683ec13de75cde3a3ade686e8fdff44567366fc271426e904a208376eb969f601ccba17737db34cd630e78e75c1c156e84c423a9b35f4b0a768eeae2397beee372f704d12b01bfe50c22a0caf7fb5cd4c956a997c9b20e2b82a64abd8703d4d25a08acf280467f76bd7fc1544c134dcec9ea1f5dc18025831370febb0692a301514a15c1a4d9a4cee9a5684e93984c012a231e117e1ec5a5e7a438c8e8db8d43912d9b16b63f9f402216e75c9a7d0fb19aa1adf48fa0d14c0aa055c2801b33231c8ba2e0d5829304da98638a5df377ddab14e654101dd80fc447070d8a9a4c9879dcf677e3154d070e642f2cda12c08500272b18a40578dc93e882ae3ce4203bbbd9bcc75b275c4b0330e60217b65a1b475b9c5a34ea80ce0635a46a6a26869b1f27053bdb3fcc9469cece75f350dd490c9aee599d98161a491daba27ee8771c0c482f236de8c7c477e91dff862"}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, "2f43914e8d97f06a5a8cb780ef0ebc68d386aba88f2329278889d6e2a4ef9b010512479ba7f275"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x1000, 0x0, 0x5, 0x1f, 0x6, 0x3f, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, "ab1b71"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5b, 0x6, 0x8000, 0x8000, 0x9, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5b, 0x3ff, 0x1ff, 0x2, 0x4, 0x2, 0x7ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1f, 0xe, 0xef2, 0xb3, 0x62d, 0x0, 0x6f63]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "b1ea9c832c6942c7ef843c5de8932215f44f4c9205fd3f95ba93852cdd91c7"}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, [@NL80211_TXRATE_HT={0xc, 0x2, "beda18dd36da4287"}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, "d25edc05406e11c799e784a35560105810c6a4925fe3"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0xd94, 0x8, 0x0, 0x8000, 0x6, 0xea14]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "81"}, @NL80211_TXRATE_HT={0x3d, 0x2, "a8b21b7cf9132aa4100952e73c0de7266cf5841436d56fecd6d6d7e143096d7d4b729430bdd87cf58774638fdf23bfda6511b8890d3aa1f8fa"}, @NL80211_TXRATE_HT={0x3e, 0x2, "0daa8af100f3054dc4bd4f1c9e8ad2cb5132dd9ce765d23872628259637e66888299d3b1d2cdec0f56439092ba9e1d7c251f37d62265fd0c8446"}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "e3201950a2fdfc58cd2797"}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x1, 0xfff8, 0x0, 0xfffd, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, "58b852060b3c876649dce7deb5397b5d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x6, 0x7, 0xff, 0x7ff, 0x9, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "bb2d2a7b88dfd99a7728454bd9"}]}, @NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, [@NL80211_TXRATE_HT={0x24, 0x2, "553be770723bf9670f2586c5171b2ed474d408f5f5911a1309b7e207a5610c8a"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, [@NL80211_TXRATE_HT={0x1e, 0x2, "d687c197bd7250b68432f03ebb99ce7696f8b77131f974d889bb"}, @NL80211_TXRATE_HT={0x51, 0x2, "694902ba2728ed805815c4aea5e4aed52a07c2ddf91496bcfa537ec45d21f84b22e256bfa1984c41cfdf8c58d26656e7852e85e6805054efbe147d6235a4c8f6e4cb5c7cf35cfd4b314abbbd2c"}]}, @NL80211_BAND_5GHZ={0x14, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, [@NL80211_TXRATE_LEGACY={0x14, 0x1, "d1f66cc6183a032b4abd1ff1fe360312"}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0xb2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) dup(0xffffffffffffffff) 00:08:53 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x10104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22}, {0x2, 0x4e20, @remote}, {0x2, 0x0, @broadcast}, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f00000001c0)={0x3f, 0x0, 0x2, 0x20, 0x800}) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 00:08:53 executing program 4: pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7f0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000340)=""/107, &(0x7f0000000040)=0x6b) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x53) sendmmsg(r1, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) read(r1, &(0x7f0000000200)=""/162, 0xa2) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000002c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xdd5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/97) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @loopback}, {0x2, 0x0, @broadcast}, 0x17a, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x6, 0x68}) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x2) unshare(0x60000000) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x20}}, 0x14) 00:08:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{}, {}]}) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) tkill(0x0, 0x3c) creat(&(0x7f0000000240)='./bus\x00', 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ftruncate(r1, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) 00:08:53 executing program 1: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) dup(0xffffffffffffffff) 00:08:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x22, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) 00:08:53 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f00000001c0)={0x3f, 0x8001, 0x2, 0x20, 0x800}) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r0, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) open(0x0, 0x0, 0x0) 00:08:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{}, {}]}) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='+', 0x1}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) fallocate(0xffffffffffffffff, 0x100000001, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ftruncate(r1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) 00:08:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000300)) write(0xffffffffffffffff, 0x0, 0x0) io_getevents(r1, 0x401, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="7ec8e65a404276b209813842348e59d609c52d9dc6eb782650d554fdca15aa14cbdb5c8bd544b132678c186ff3c253c7da440000f2727bfaa7d7480f71b6f94cd0b3b73f690200000086a409d437f864633b5ce1e0189aca04ee52b8c804f097f5b9b58b4256fb088afd5e0737379fd5fc7652d41b8fcf32251f5625e24b8b43b57f3ad3e0e0c3ce928495f220ed018ea569c40165c2eeae04001a96ffffe3a0f7fa17cf7596f6e8f74df06bd3ef13eb4c6a68d4fb4b016c354f33269053970de7d5f91a0d61cffb674d467f593ba257d8fa86541ad635359a1100000000000100007b667f3f6e03a498000000000dac8624202f700b98cc564a6db6be", @ANYBLOB="6b909d96a7ae159feb61a1a3dd6cda961ed5bac82cb32b1dbc4048357498de76c20e54fe5b4e24a26f2c16cb30b17f91818eeffcfc5e06910c03f0ad05c0b32fa607e880fcc6fa42226d741b28c5d0a9d213f9873198d8d65d08f628bffd38853754d454d9b8eafd46dbec010ef2f3121fdb9cccb3b7b902f9eebb37b6f2cafbe3cf87016f94a77a7d30b93989d2ad037160c15e6f43f210045377ae5cbbc8bf066cb2f3a96c58f9ed5f9aa3973f24a7639f453f657ca6f617fc95ab30ef8b885460e762038ccc5cf9a9bcd751c9fd70c59e1bf5c472862dad9e3e848c35493f80e28c3ead6f05d6d22f7f821383814c1cb4fd9b9f2b6b3354a2228af6051a25096495472d5b2dda0552d67a2599851ecf5665cee535b4e38167d1359f03a6127795fe17b25aaea83b"], 0x3}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@private2, 0x63}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) [ 2626.034566][T14032] IPVS: ftp: loaded support on port[0] = 21 00:08:54 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x10104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @broadcast}, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe) sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap$perf(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r0, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) prctl$PR_GET_DUMPABLE(0x3) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 00:08:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000001300)={0x4040, 0x10, 0x4}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001380)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100085a0}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x5c, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x5c}}, 0x200408c0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x71}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x20008810) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:54 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x10000000) 00:08:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80), 0x0, 0x12102, 0x0) [ 2626.688335][ T5896] tipc: TX() has been purged, node left! 00:08:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87a}, 0x0, 0x7}) 00:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)={{0x1}}) 00:08:54 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1ff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xee63, 0x20, 0x2}) 00:08:54 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) write$tun(r2, &(0x7f0000000080)={@void, @void, @x25={0x2, 0x7, 0xb, "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"}}, 0x1003) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:54 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x7f, 0xd5c, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xee63, 0x20, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r0, 0x0) 00:08:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x4000000}, 0x0) 00:08:54 executing program 1: 00:08:55 executing program 4: setpriority(0x0, 0x0, 0x7) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x40, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000002c0)=0x4) r1 = mq_open(&(0x7f0000000380)='!\x7f\x00\x00\x00nu\tW*linux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000040)=""/194, 0xc2, 0x0, &(0x7f0000000140)={0x0, 0x989680}) 00:08:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10b}) 00:08:55 executing program 3: socket$rxrpc(0x21, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x5, 0x40000) write(r1, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 00:08:55 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1ff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xee63, 0x20, 0x2}) [ 2627.221516][T14126] Unknown ioctl 1074025998 00:08:55 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x7f, 0xd5c, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc02c5341, &(0x7f00000002c0)={r3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r0, 0x0) 00:08:55 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1ff, 0x80) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x7f, 0xd5c, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xee63, 0x20, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r0, 0x0) 00:08:55 executing program 2: 00:08:55 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1ff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xee63, 0x20, 0x2}) 00:08:55 executing program 2: 00:08:55 executing program 4: 00:08:55 executing program 2: 00:08:55 executing program 5: 00:08:55 executing program 0: 00:08:55 executing program 2: 00:08:55 executing program 4: 00:08:55 executing program 5: 00:08:55 executing program 0: 00:08:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000001c0)={0x4, 0x7ff, 0x0, r1, 0x0, &(0x7f0000000180)={0x9c0904, 0x8, [], @p_u32=&(0x7f0000000000)=0x8c6aea2}}) write$UHID_CREATE(r2, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/82, 0x52, 0x7, 0x58e7, 0x77d1, 0x86, 0x3}}, 0x11c) write(r0, &(0x7f0000000080)="14000081000710a8eeff9caa5490ead35628a20192868fb2ce6e62c02cc85f7825f30902e33d497c8ea89fe7ab3f015d362f24df5c22c0a77f7b28fc0245e7c9c6866638b69ecc20621dc35e3b3909af1e0ce76fa775c29b9838ac9a9e12245a4dbeda06ec3ac4f07b1bc09a9ee6090023b07c91f574514cb1a84aa742b6d9b7f74948f23c81bbb5e4f0642eba55d519da6b0275e06db082513f3458ccf657211cd53bf142eaa4f1e361068141ca1b65bc648626e42fb6ede508d42d6d9091426d038a4428b25cd2d0e2", 0xca) readv(r0, &(0x7f0000000040), 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:55 executing program 1: 00:08:56 executing program 5: 00:08:56 executing program 2: 00:08:56 executing program 4: 00:08:56 executing program 1: 00:08:56 executing program 4: 00:08:56 executing program 1: 00:08:56 executing program 2: 00:08:56 executing program 5: 00:08:56 executing program 4: 00:08:56 executing program 0: 00:08:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80), 0x0, 0x40010023, 0x0) 00:08:56 executing program 2: 00:08:56 executing program 5: 00:08:56 executing program 1: 00:08:56 executing program 4: 00:08:56 executing program 0: 00:08:56 executing program 2: 00:08:56 executing program 1: 00:08:57 executing program 4: 00:08:57 executing program 5: 00:08:57 executing program 2: 00:08:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) sendmsg$rds(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000200)=""/189, 0xbd}], 0x4, &(0x7f0000000380)=[@fadd={0x58, 0x114, 0x6, {{0x20, 0x8}, &(0x7f0000000300)=0x1, &(0x7f0000000340)=0xb5, 0x9, 0x8000, 0x8, 0x400000000000000, 0x8, 0xc1e}}], 0x58, 0x40000}, 0x4000000) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000800)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/142, 0x8e}, {&(0x7f0000000680)=""/36, 0x24}], 0x4, &(0x7f0000000700)=""/197, 0xc5}, 0x40000000) fdatasync(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000840)={0xfffffbff, "718f6e2a2761560594352198c98bdd15f9eaff19863679fd93ef448bad61e8dd", 0x2, 0x1}) 00:08:57 executing program 5: 00:08:57 executing program 0: 00:08:57 executing program 1: 00:08:57 executing program 4: 00:08:57 executing program 2: 00:08:57 executing program 5: 00:08:57 executing program 1: 00:08:57 executing program 4: 00:08:57 executing program 2: 00:08:57 executing program 5: 00:08:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0xfffffffffffffdf5}, 0x6}], 0x1, 0x10122, 0x0) 00:08:57 executing program 4: 00:08:57 executing program 1: 00:08:57 executing program 0: 00:08:57 executing program 5: 00:08:57 executing program 2: 00:08:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/163, 0xa3}], 0x2, &(0x7f0000000200)=""/28, 0x1c}, 0x7ff}, {{&(0x7f0000000240)=@caif=@dgm, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/100, 0x64}], 0x5, &(0x7f0000000440)=""/217, 0xd9}, 0x3}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/60, 0x3c}], 0x3}, 0x7}], 0x3, 0x10122, 0x0) 00:08:57 executing program 4: 00:08:57 executing program 1: 00:08:57 executing program 5: 00:08:57 executing program 2: 00:08:57 executing program 4: 00:08:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) epoll_wait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x1000) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:57 executing program 1: 00:08:57 executing program 4: 00:08:57 executing program 0: 00:08:57 executing program 5: 00:08:57 executing program 1: 00:08:57 executing program 2: 00:08:57 executing program 4: 00:08:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0x67, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf250d00000008003400cf010000060028000400000000000600", @ANYRES32=0x0, @ANYBLOB="e0f0fdcb69a067053b14d7a44ca9ff6dedc9d15f7745c5298ff283c1edd156d0beaa2059b57c0366b4ef51f4f58652ef0dbdde68cd9d7f6a7ddbcbe278a8c7269503bfe6467dd6c6586d913cda836caa174be4b24508d143721ac2ce061bdf94fef5a7db2f89c65a9f62833a1acd106871bc4932d16942676621459c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x48054) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:58 executing program 2: 00:08:58 executing program 4: 00:08:58 executing program 5: 00:08:58 executing program 1: 00:08:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 00:08:58 executing program 2: 00:08:58 executing program 0: 00:08:58 executing program 2: 00:08:58 executing program 5: 00:08:58 executing program 4: 00:08:58 executing program 1: [ 2630.340009][T14242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_proto_private(r3, 0x89ea, &(0x7f0000000280)="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") getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x80000001}, @in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}, 0x27}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @private=0xa010102}, 0x20}, @in6={0xa, 0x4e24, 0x7fffffff, @ipv4={[], [], @rand_addr=0x64010101}, 0x8f}, @in6={0xa, 0x4e23, 0x18, @dev={0xfe, 0x80, [], 0x44}, 0x7ff}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x800}], 0xc8) 00:08:58 executing program 2: 00:08:58 executing program 1: 00:08:58 executing program 5: 00:08:58 executing program 4: 00:08:58 executing program 2: 00:08:58 executing program 1: 00:08:58 executing program 0: 00:08:58 executing program 5: 00:08:58 executing program 4: 00:08:58 executing program 2: 00:08:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'macvlan0\x00', 0x6}) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:58 executing program 1: 00:08:58 executing program 4: 00:08:58 executing program 5: 00:08:58 executing program 2: 00:08:58 executing program 1: [ 2630.788508][T14270] macvlan0: mtu less than device minimum 00:08:58 executing program 2: 00:08:58 executing program 4: [ 2630.839753][T14270] macvlan0: mtu less than device minimum 00:08:58 executing program 0: 00:08:58 executing program 5: 00:08:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)=""/66, &(0x7f0000000000)=0x42) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x8808}, @val={0x1, 0x0, 0x9, 0xe74b, 0xe75, 0x9}, @ipv4=@dccp={{0x12, 0x4, 0x0, 0x18, 0xe1, 0x66, 0x0, 0x1f, 0x21, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x13, 0xcd, [@local, @loopback, @empty, @empty]}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x2, [0x9, 0x10000, 0x45cd]}, @lsrr={0x83, 0xf, 0xaf, [@dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010101]}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x2, "94c45b", 0x8, "faf00b"}, "2f5a72c5216664ec5efe582eab4be57af252cf0408dc7927cda772a706f9b4b4fe255323c71853b7d3d86cf833fb91d9c79467e131ac72efb5af0c10a78a70fadffc6f139c82f2d648d64bebbaeaa58286e3d92f556d270b906157ea76e86eedc61033d514e2de8753e058591101517084db55c5cbb90403bbb40f8d229a6526f0828d90e6155006bf"}}}, 0xef) 00:08:58 executing program 1: 00:08:58 executing program 2: 00:08:58 executing program 4: 00:08:58 executing program 1: 00:08:58 executing program 5: 00:08:58 executing program 4: 00:08:58 executing program 2: 00:08:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}, 0x8}], 0x800000000000046, 0x40012041, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000001c0)={0x9, &(0x7f0000000100)=[{@fixed}, {@fixed}, {@none}, {@fixed}, {}, {@fixed}, {}, {}, {@none}]}) openat$vsock(0xffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101880, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x7) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000000c0)={0x9, 0xa, 0x101}) 00:08:59 executing program 5: 00:08:59 executing program 0: 00:08:59 executing program 2: 00:08:59 executing program 1: 00:08:59 executing program 4: 00:08:59 executing program 5: [ 2631.251080][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2631.285432][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:59 executing program 3: r0 = socket(0x2a, 0x80000, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0x1, 0x4, 0x24, 0x8, 0xfffffffc}, 0x14) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) 00:08:59 executing program 4: 00:08:59 executing program 1: 00:08:59 executing program 5: 00:08:59 executing program 2: 00:08:59 executing program 3: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x2c042, 0x0) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x200) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000003800)='/dev/btrfs-control\x00', 0x10900, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@deltaction={0x140, 0x31, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24008000}, 0x5) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="3400000003000000000000000000001006000000762f62747266732d636f6e74726f6c000000000000"], 0x34) r4 = syz_open_dev$audion(&(0x7f0000003840)='/dev/audio#\x00', 0xff, 0x40020) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000003880)={r2, r4}) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:08:59 executing program 1: 00:08:59 executing program 0: 00:08:59 executing program 4: 00:08:59 executing program 2: 00:08:59 executing program 5: 00:08:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) 00:08:59 executing program 1: 00:08:59 executing program 2: 00:08:59 executing program 4: 00:08:59 executing program 5: 00:08:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) r6 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x50, 0x2108c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x84000808}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030326bd7000ffdbdf250200000008006100ff03000028004000ffffff7f08000300", @ANYRES32=r3, @ANYBLOB="08000a010700000008002600000000000800620001000080080061006f0000000c0025800600030000010000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r9, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="020028bd7000fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000800001006f04119d2d34949fca02fa7063690011000200303030303a30303a31302e30000000000800030003000000"], 0xac}, 0x1, 0x0, 0x0, 0x4804}, 0x20) 00:08:59 executing program 1: 00:08:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 00:08:59 executing program 0: 00:08:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r0, &(0x7f0000001800)=ANY=[], 0x78) 00:08:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r5) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:08:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 00:08:59 executing program 4: [ 2631.902823][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2631.970677][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:08:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x2, 0x2}]}}}]}, 0x40}}, 0x0) 00:08:59 executing program 5: prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000deeb7bba00281213bd5d74dafc20380003"], 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') fchdir(r4) r5 = dup(r1) write$P9_RGETATTR(r5, &(0x7f0000000100)={0xa0, 0x19, 0x0, {0x0, {}, 0xc2}}, 0xa0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') 00:08:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x5, [0x91, 0x5, 0xf2c6, 0xfffb, 0x8001]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xef5, 0x20000000, 0x1f}, &(0x7f0000000100)=0x10) 00:09:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 00:09:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0x80000}) 00:09:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x9, 0x2}]}}}]}, 0x3c}}, 0x0) 00:09:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x209}, 0x14}}, 0x0) [ 2632.382364][T14385] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 00:09:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 00:09:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)) 00:09:00 executing program 2: syslog(0x3, &(0x7f0000000380)=""/140, 0x6d85) 00:09:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) acct(&(0x7f0000000000)='./file0\x00') recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:09:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000000)=[0xffffffff], 0x1}) 00:09:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 00:09:00 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r3, 0x402, 0x1) fcntl$setownex(r3, 0xf, &(0x7f0000000000)) 00:09:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 00:09:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x3b, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 00:09:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0x80086601, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 00:09:00 executing program 3: r0 = socket(0x1e, 0x3, 0xffbffeff) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe4) bind$can_raw(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001cb85442aabb0a17dc5851585ab58ff565eafb1de1a96dc746ea19cbcc89412c7387e0bf8e7d2025737683ab269a2e", @ANYRES32=r3, @ANYBLOB="15fd040000000000000012000900010076657468", @ANYRESDEC=r6, @ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRES64, @ANYRES64], 0x48}}, 0x0) fcntl$getown(r1, 0x9) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) 00:09:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x20, 0x8, 0x8000, 0x5}) 00:09:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:09:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x50, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00'}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:09:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 00:09:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x81, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000001180), &(0x7f0000000400)}, 0x20) 00:09:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp6\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000b40)=""/208, 0xd0}], 0x1, 0x6) 00:09:00 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 2632.905232][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2632.916950][T14419] bond1 (uninitialized): Released all slaves 00:09:00 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2, 0x0], 0x2}) 00:09:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x32, 0x119, 0x0, 0x0, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) 00:09:00 executing program 3: 00:09:00 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @local, @val, {@ipv4}}, 0x0) 00:09:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c9, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 00:09:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000340)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:09:01 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x3) 00:09:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 00:09:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000)) 00:09:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x309}, 0x14}}, 0x0) 00:09:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)) 00:09:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}]}, 0x58}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 00:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "000000008dffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:09:03 executing program 5: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syslog(0x3, &(0x7f0000000380)=""/140, 0x8c) 00:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x2c]}]}, 0x40}}, 0x0) 00:09:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x3}]}}}]}, 0x3c}}, 0x0) 00:09:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x2, 0x0], 0x2}) 00:09:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syslog(0x3, &(0x7f0000000380)=""/140, 0x8c) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x8950) [ 2636.131837][T14485] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 2636.178284][T14488] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 00:09:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:09:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)) 00:09:04 executing program 5: clone(0x2000200cffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 00:09:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}]}}}]}, 0x44}}, 0x0) [ 2636.297063][T14497] device lo entered promiscuous mode 00:09:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x20, 0x8, 0x8000}) 00:09:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe6c}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x44}}, 0x0) [ 2636.769177][T14497] device tunl0 entered promiscuous mode [ 2636.924835][T14497] device gre0 entered promiscuous mode 00:09:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 00:09:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x2, &(0x7f0000000380)=""/146, 0x92) 00:09:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1}) 00:09:04 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/218, 0xda}], 0x1, 0x0) 00:09:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x50}}, 0x0) 00:09:05 executing program 2: r0 = open(&(0x7f00000001c0)='./file1\x00', 0x1c3042, 0x0) ftruncate(r0, 0xfdff) r1 = eventfd(0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) dup3(r3, r1, 0x0) r4 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x10000) [ 2637.188202][T14497] device gretap0 entered promiscuous mode [ 2637.501954][T14497] device erspan0 entered promiscuous mode [ 2637.729580][T14497] device ip_vti0 entered promiscuous mode [ 2637.882330][T14497] device ip6_vti0 entered promiscuous mode [ 2638.103176][T14497] device sit0 entered promiscuous mode [ 2638.532463][T14497] device ip6tnl0 entered promiscuous mode [ 2638.751089][T14497] device ip6gre0 entered promiscuous mode [ 2638.970308][T14497] device syz_tun entered promiscuous mode [ 2639.188404][T14497] device ip6gretap0 entered promiscuous mode [ 2639.405914][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 2639.413491][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 2639.424108][T14497] device bridge0 entered promiscuous mode [ 2639.644297][T14497] device vcan0 entered promiscuous mode [ 2639.719108][T14497] device bond0 entered promiscuous mode [ 2639.724869][T14497] device bond_slave_0 entered promiscuous mode [ 2639.731160][T14497] device bond_slave_1 entered promiscuous mode [ 2639.932010][T14497] device team0 entered promiscuous mode [ 2639.937773][T14497] device team_slave_0 entered promiscuous mode [ 2639.946591][T14497] device team_slave_1 entered promiscuous mode [ 2640.141977][T14497] device dummy0 entered promiscuous mode [ 2640.347393][T14497] device nlmon0 entered promiscuous mode [ 2640.424008][T14497] device caif0 entered promiscuous mode [ 2640.482068][T14497] device batadv0 entered promiscuous mode [ 2640.676295][T14497] device vxcan0 entered promiscuous mode [ 2640.749796][T14497] device vxcan1 entered promiscuous mode [ 2640.816905][T14497] device veth0 entered promiscuous mode [ 2641.008871][T14497] device veth1 entered promiscuous mode [ 2641.084204][T14497] device xfrm0 entered promiscuous mode [ 2641.253499][T14497] device wg0 entered promiscuous mode [ 2641.423486][T14497] device wg1 entered promiscuous mode [ 2641.593557][T14497] device wg2 entered promiscuous mode [ 2641.723173][T14497] device veth0_to_bridge entered promiscuous mode [ 2642.041562][T14497] device veth1_to_bridge entered promiscuous mode [ 2642.351063][T14497] device veth0_to_bond entered promiscuous mode [ 2642.600521][T14497] device veth1_to_bond entered promiscuous mode [ 2642.857140][T14497] device veth0_to_team entered promiscuous mode [ 2643.175074][T14497] device veth1_to_team entered promiscuous mode [ 2643.490555][T14497] device veth0_to_batadv entered promiscuous mode [ 2643.573976][T14497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2643.691340][T14497] device batadv_slave_0 entered promiscuous mode [ 2643.886482][T14497] device veth1_to_batadv entered promiscuous mode [ 2643.963677][T14497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2644.090921][T14497] device batadv_slave_1 entered promiscuous mode [ 2644.279391][T14497] device veth0_to_hsr entered promiscuous mode [ 2644.600210][T14497] device veth1_to_hsr entered promiscuous mode [ 2644.921982][T14497] device hsr0 entered promiscuous mode [ 2645.113624][T14497] device veth1_virt_wifi entered promiscuous mode [ 2645.306144][T14497] device veth0_virt_wifi entered promiscuous mode [ 2645.383456][T14497] device virt_wifi0 entered promiscuous mode [ 2646.130962][T14497] device vlan1 entered promiscuous mode [ 2646.302959][T14497] device macvlan0 entered promiscuous mode [ 2646.532931][T14497] device macvlan1 entered promiscuous mode [ 2646.623426][T14497] device ipvlan0 entered promiscuous mode [ 2646.629339][T14497] device ipvlan1 entered promiscuous mode [ 2647.142855][T14497] device macvtap0 entered promiscuous mode [ 2647.329104][T14497] device macsec0 entered promiscuous mode [ 2647.521060][T14497] device geneve0 entered promiscuous mode [ 2647.712303][T14497] device geneve1 entered promiscuous mode [ 2647.904502][T14497] device netdevsim0 entered promiscuous mode [ 2648.031972][T14497] device netdevsim1 entered promiscuous mode [ 2648.167948][T14497] device netdevsim2 entered promiscuous mode [ 2648.296185][T14497] device netdevsim3 entered promiscuous mode [ 2648.373186][T14497] device gretap1 entered promiscuous mode [ 2648.496940][T14497] device vxlan0 entered promiscuous mode [ 2648.573023][T14497] device veth2 entered promiscuous mode [ 2648.578724][T14497] device veth3 entered promiscuous mode [ 2648.601746][T14497] device veth4 entered promiscuous mode [ 2648.608094][T14497] device veth5 entered promiscuous mode [ 2648.621206][T14497] device veth6 entered promiscuous mode [ 2648.627054][T14497] device veth7 entered promiscuous mode [ 2648.641293][T14497] device veth8 entered promiscuous mode [ 2648.647082][T14497] device veth9 entered promiscuous mode [ 2648.658064][T14497] device veth10 entered promiscuous mode [ 2648.664169][T14497] device veth11 entered promiscuous mode [ 2648.669890][T14497] device veth12 entered promiscuous mode [ 2648.679715][T14497] device veth13 entered promiscuous mode [ 2648.685552][T14497] device veth14 entered promiscuous mode [ 2648.691349][T14497] device veth15 entered promiscuous mode [ 2648.701161][T14497] device veth16 entered promiscuous mode [ 2648.708225][T14497] device veth17 entered promiscuous mode [ 2648.718666][T14497] device veth18 entered promiscuous mode [ 2648.724568][T14497] device veth19 entered promiscuous mode [ 2648.730275][T14497] device veth20 entered promiscuous mode [ 2648.736169][T14497] device veth21 entered promiscuous mode [ 2648.741953][T14497] device veth22 entered promiscuous mode [ 2648.747769][T14497] device veth23 entered promiscuous mode [ 2648.753623][T14497] device veth24 entered promiscuous mode [ 2648.760025][T14497] device veth25 entered promiscuous mode [ 2648.765842][T14497] device veth26 entered promiscuous mode [ 2648.771560][T14497] device veth27 entered promiscuous mode [ 2648.777395][T14497] device veth28 entered promiscuous mode [ 2648.783239][T14497] device veth29 entered promiscuous mode [ 2648.788944][T14497] device veth30 entered promiscuous mode [ 2648.794797][T14497] device veth31 entered promiscuous mode [ 2648.801119][T14497] device veth32 entered promiscuous mode [ 2648.806954][T14497] device veth33 entered promiscuous mode [ 2648.814518][T14497] device veth34 entered promiscuous mode [ 2648.820228][T14497] device veth35 entered promiscuous mode [ 2648.826044][T14497] device veth36 entered promiscuous mode [ 2648.831761][T14497] device veth37 entered promiscuous mode [ 2648.837713][T14497] device veth38 entered promiscuous mode [ 2648.843591][T14497] device veth39 entered promiscuous mode [ 2648.849322][T14497] device veth40 entered promiscuous mode [ 2648.855171][T14497] device veth41 entered promiscuous mode [ 2648.860880][T14497] device veth42 entered promiscuous mode [ 2648.866692][T14497] device veth43 entered promiscuous mode [ 2648.872410][T14497] device veth44 entered promiscuous mode [ 2648.878226][T14497] device veth45 entered promiscuous mode [ 2648.884505][T14497] device veth46 entered promiscuous mode [ 2648.890223][T14497] device veth47 entered promiscuous mode [ 2648.896083][T14497] device veth48 entered promiscuous mode [ 2648.901811][T14497] device veth49 entered promiscuous mode [ 2648.907644][T14497] device veth50 entered promiscuous mode [ 2648.913514][T14497] device veth51 entered promiscuous mode [ 2648.919230][T14497] device veth52 entered promiscuous mode [ 2648.926282][T14497] device veth53 entered promiscuous mode [ 2648.931984][T14497] device veth54 entered promiscuous mode [ 2648.937820][T14497] device veth55 entered promiscuous mode [ 2648.943672][T14497] device veth56 entered promiscuous mode [ 2648.949377][T14497] device veth57 entered promiscuous mode [ 2648.955190][T14497] device veth58 entered promiscuous mode [ 2648.960900][T14497] device veth59 entered promiscuous mode [ 2648.966742][T14497] device veth60 entered promiscuous mode [ 2648.972447][T14497] device veth61 entered promiscuous mode [ 2648.978297][T14497] device veth62 entered promiscuous mode [ 2648.984133][T14497] device veth63 entered promiscuous mode [ 2648.989844][T14497] device veth64 entered promiscuous mode [ 2648.995701][T14497] device veth65 entered promiscuous mode [ 2649.001419][T14497] device veth66 entered promiscuous mode [ 2649.007235][T14497] device veth67 entered promiscuous mode [ 2649.013100][T14497] device sit1 entered promiscuous mode [ 2649.019048][T14497] device bridge1 entered promiscuous mode [ 2649.093483][T14497] device veth68 entered promiscuous mode [ 2649.099311][T14497] device veth69 entered promiscuous mode [ 2649.123041][T14497] device veth70 entered promiscuous mode [ 2649.128946][T14497] device veth71 entered promiscuous mode [ 2649.141992][T14497] device veth72 entered promiscuous mode [ 2649.149624][T14497] device veth73 entered promiscuous mode [ 2649.162038][T14497] device veth74 entered promiscuous mode [ 2649.170651][T14497] device veth75 entered promiscuous mode [ 2649.184689][T14497] device veth76 entered promiscuous mode [ 2649.190511][T14497] device veth77 entered promiscuous mode [ 2649.209561][T14497] device veth78 entered promiscuous mode [ 2649.220861][T14497] device veth79 entered promiscuous mode [ 2649.229727][T14497] device veth80 entered promiscuous mode [ 2649.241635][T14497] device veth81 entered promiscuous mode [ 2649.250535][T14497] device veth82 entered promiscuous mode [ 2649.261791][T14497] device veth83 entered promiscuous mode [ 2649.270494][T14497] device veth84 entered promiscuous mode [ 2649.281669][T14497] device veth85 entered promiscuous mode [ 2649.290669][T14497] device veth86 entered promiscuous mode [ 2649.308027][T14497] device veth87 entered promiscuous mode [ 2649.317663][T14497] device veth88 entered promiscuous mode [ 2649.328887][T14497] device veth89 entered promiscuous mode [ 2649.337614][T14497] device veth90 entered promiscuous mode [ 2649.348897][T14497] device veth91 entered promiscuous mode [ 2649.357715][T14497] device veth92 entered promiscuous mode [ 2649.366747][T14497] device veth93 entered promiscuous mode [ 2649.372465][T14497] device veth94 entered promiscuous mode [ 2649.378363][T14497] device veth95 entered promiscuous mode [ 2649.384327][T14497] device veth96 entered promiscuous mode [ 2649.391020][T14497] device veth97 entered promiscuous mode [ 2649.396923][T14497] device veth98 entered promiscuous mode [ 2649.402819][T14497] device veth99 entered promiscuous mode [ 2649.408792][T14497] device veth100 entered promiscuous mode [ 2649.414838][T14497] device veth101 entered promiscuous mode [ 2649.420656][T14497] device veth102 entered promiscuous mode [ 2649.427283][T14497] device veth103 entered promiscuous mode [ 2649.434143][T14497] device veth104 entered promiscuous mode [ 2649.439948][T14497] device veth105 entered promiscuous mode [ 2649.448031][T14497] device bond1 entered promiscuous mode [ 2649.454302][T14497] device bond2 entered promiscuous mode [ 2649.459972][T14497] device veth106 entered promiscuous mode [ 2649.467520][T14497] device veth107 entered promiscuous mode [ 2649.473989][T14497] device ip6erspan0 entered promiscuous mode [ 2649.480058][T14497] device veth108 entered promiscuous mode [ 2649.486770][T14497] device veth109 entered promiscuous mode [ 2649.493172][T14497] device veth110 entered promiscuous mode [ 2649.499059][T14497] device veth111 entered promiscuous mode [ 2649.505697][T14497] device veth112 entered promiscuous mode [ 2649.511542][T14497] device veth113 entered promiscuous mode [ 2649.518290][T14497] device veth114 entered promiscuous mode [ 2649.525615][T14497] device veth115 entered promiscuous mode [ 2649.531400][T14497] device veth116 entered promiscuous mode [ 2649.538072][T14497] device veth117 entered promiscuous mode [ 2649.544353][T14497] device veth118 entered promiscuous mode [ 2649.550134][T14497] device veth119 entered promiscuous mode [ 2649.556850][T14497] device veth120 entered promiscuous mode [ 2649.563384][T14497] device veth121 entered promiscuous mode [ 2649.569185][T14497] device veth122 entered promiscuous mode [ 2649.577633][T14497] device veth123 entered promiscuous mode [ 2649.583968][T14497] device veth124 entered promiscuous mode [ 2649.589759][T14497] device veth125 entered promiscuous mode [ 2649.596520][T14497] device veth126 entered promiscuous mode [ 2649.602321][T14497] device veth127 entered promiscuous mode [ 2649.609396][T14497] device veth128 entered promiscuous mode [ 2649.615783][T14497] device veth129 entered promiscuous mode [ 2649.621585][T14497] device veth130 entered promiscuous mode [ 2649.628214][T14497] device veth131 entered promiscuous mode [ 2649.634626][T14497] device veth132 entered promiscuous mode [ 2649.640443][T14497] device veth133 entered promiscuous mode [ 2649.648191][T14497] device veth134 entered promiscuous mode [ 2649.654717][T14497] device veth135 entered promiscuous mode [ 2649.661151][T14497] device veth136 entered promiscuous mode [ 2649.667860][T14497] device veth137 entered promiscuous mode [ 2649.674265][T14497] device veth138 entered promiscuous mode [ 2649.680064][T14497] device veth139 entered promiscuous mode [ 2649.688309][T14497] device veth140 entered promiscuous mode [ 2649.694699][T14497] device veth141 entered promiscuous mode [ 2649.700501][T14497] device veth142 entered promiscuous mode [ 2649.707035][T14497] device veth143 entered promiscuous mode [ 2649.713434][T14497] device veth144 entered promiscuous mode [ 2649.719273][T14497] device veth145 entered promiscuous mode [ 2649.725804][T14497] device veth146 entered promiscuous mode [ 2649.731598][T14497] device veth147 entered promiscuous mode [ 2649.738340][T14497] device veth148 entered promiscuous mode [ 2649.744661][T14497] device veth149 entered promiscuous mode [ 2649.750475][T14497] device veth150 entered promiscuous mode [ 2649.757283][T14497] device veth151 entered promiscuous mode [ 2649.763713][T14497] device veth152 entered promiscuous mode [ 2649.769503][T14497] device veth153 entered promiscuous mode [ 2649.776554][T14497] device veth154 entered promiscuous mode [ 2649.782351][T14497] device veth155 entered promiscuous mode [ 2649.788917][T14497] device veth156 entered promiscuous mode [ 2649.796970][T14497] device veth157 entered promiscuous mode [ 2649.803325][T14497] device veth158 entered promiscuous mode [ 2649.809116][T14497] device veth159 entered promiscuous mode [ 2649.815906][T14497] device veth160 entered promiscuous mode [ 2649.821709][T14497] device veth161 entered promiscuous mode [ 2649.828306][T14497] device veth162 entered promiscuous mode [ 2649.834675][T14497] device veth163 entered promiscuous mode [ 2649.840481][T14497] device veth164 entered promiscuous mode [ 2649.846996][T14497] device veth165 entered promiscuous mode [ 2649.853371][T14497] device veth166 entered promiscuous mode [ 2649.859168][T14497] device veth167 entered promiscuous mode [ 2649.865696][T14497] device veth168 entered promiscuous mode [ 2649.871487][T14497] device veth169 entered promiscuous mode [ 2649.878283][T14497] device veth170 entered promiscuous mode [ 2649.884599][T14497] device veth171 entered promiscuous mode [ 2649.890915][T14497] device veth172 entered promiscuous mode [ 2649.898704][T14497] device veth173 entered promiscuous mode [ 2649.906241][T14497] device veth174 entered promiscuous mode [ 2649.912045][T14497] device veth175 entered promiscuous mode [ 2649.918959][T14497] device veth176 entered promiscuous mode [ 2649.925867][T14497] device veth177 entered promiscuous mode [ 2649.931670][T14497] device veth178 entered promiscuous mode [ 2649.938499][T14497] device veth179 entered promiscuous mode [ 2649.944842][T14497] device veth180 entered promiscuous mode [ 2649.950642][T14497] device veth181 entered promiscuous mode [ 2649.957430][T14497] device veth182 entered promiscuous mode [ 2649.963799][T14497] device veth183 entered promiscuous mode [ 2649.969615][T14497] device veth184 entered promiscuous mode [ 2649.976433][T14497] device veth185 entered promiscuous mode [ 2649.982238][T14497] device veth186 entered promiscuous mode [ 2649.988816][T14497] device veth187 entered promiscuous mode [ 2649.995255][T14497] device veth188 entered promiscuous mode [ 2650.001057][T14497] device veth189 entered promiscuous mode [ 2650.007609][T14497] device veth190 entered promiscuous mode [ 2650.016568][T14497] device veth191 entered promiscuous mode [ 2650.022370][T14497] device veth192 entered promiscuous mode [ 2650.028880][T14497] device veth193 entered promiscuous mode [ 2650.035285][T14497] device veth194 entered promiscuous mode [ 2650.041083][T14497] device veth195 entered promiscuous mode [ 2650.047629][T14497] device veth196 entered promiscuous mode [ 2650.054073][T14497] device veth197 entered promiscuous mode [ 2650.059879][T14497] device veth198 entered promiscuous mode [ 2650.066462][T14497] device veth199 entered promiscuous mode [ 2650.072252][T14497] device veth200 entered promiscuous mode [ 2650.079008][T14497] device veth201 entered promiscuous mode [ 2650.085399][T14497] device veth202 entered promiscuous mode [ 2650.091221][T14497] device veth203 entered promiscuous mode [ 2650.098089][T14497] device veth204 entered promiscuous mode [ 2650.104422][T14497] device veth205 entered promiscuous mode [ 2650.110266][T14497] device veth206 entered promiscuous mode [ 2650.117039][T14497] device veth207 entered promiscuous mode [ 2650.124370][T14497] device veth208 entered promiscuous mode [ 2650.130161][T14497] device veth209 entered promiscuous mode [ 2650.136899][T14497] device veth210 entered promiscuous mode [ 2650.142933][T14497] device veth211 entered promiscuous mode [ 2650.148728][T14497] device veth212 entered promiscuous mode [ 2650.154665][T14497] device veth213 entered promiscuous mode [ 2650.160498][T14497] device veth214 entered promiscuous mode [ 2650.166532][T14497] device veth215 entered promiscuous mode [ 2650.172360][T14497] device veth216 entered promiscuous mode [ 2650.178481][T14497] device veth217 entered promiscuous mode [ 2650.184459][T14497] device veth218 entered promiscuous mode [ 2650.190282][T14497] device veth219 entered promiscuous mode [ 2650.196249][T14497] device macvlan2 entered promiscuous mode [ 2650.202230][T14507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:09:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x11, @empty=[0x4]}]}, 0x40}}, 0x0) 00:09:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 00:09:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x40}}, 0x0) 00:09:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x81, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000580), 0x0}, 0x20) 00:09:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x50, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x29, &(0x7f0000000000)="000000000000003f7be92977f274014b2a089dba8c080f73ccd7468122157cfc58ca93d9ab0b0ad468"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:09:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x36, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 00:09:18 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xcc000000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e37090001803a643000d1bd", 0x2e}], 0x1}, 0x0) 00:09:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x35, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 2650.352903][T14558] netlink: 'syz-executor.3': attribute type 17 has an invalid length. 00:09:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)='V', 0x1, 0x1}) 00:09:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) 00:09:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)='V', 0x1, 0x1}) [ 2650.433241][T14567] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 2650.458008][T14568] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 00:09:18 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xcc000000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e37090001803a643000d1bd", 0x2e}], 0x1}, 0x0) 00:09:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:09:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:09:18 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 00:09:18 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 2650.627557][T14580] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 2650.646568][T14585] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 2653.315719][T14582] device batadv0 entered promiscuous mode [ 2653.321792][T14582] device vxcan0 entered promiscuous mode [ 2653.331161][T14582] device vxcan1 entered promiscuous mode [ 2653.337428][T14582] device veth0 entered promiscuous mode [ 2653.343661][T14582] device veth1 entered promiscuous mode [ 2653.349465][T14582] device xfrm0 entered promiscuous mode [ 2653.358026][T14582] device wg0 entered promiscuous mode 00:09:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', "00000000000000000200", "20040100"}, 0x28) 00:09:21 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) syz_genetlink_get_family_id$batadv(0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:09:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000240)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0xfffffd88) 00:09:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x37, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 00:09:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)) [ 2653.365214][T14582] device wg1 entered promiscuous mode [ 2653.370731][T14582] device wg2 entered promiscuous mode [ 2653.388934][T14582] device veth0_to_bridge entered promiscuous mode [ 2653.406293][T14582] device veth1_to_bridge entered promiscuous mode [ 2653.414535][T14582] device veth0_to_bond entered promiscuous mode [ 2653.426737][T14582] device veth1_to_bond entered promiscuous mode [ 2653.444439][T14582] device veth0_to_team entered promiscuous mode 00:09:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$inet_tcp(0x2, 0x1, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080)={0x0, r2+30000000}, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 00:09:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50f5f38706578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed821fc508c36f8419d029c078411a42338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb", 0xc9}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f5", 0x7b}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0xa00, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 2653.468787][T14582] device veth1_to_team entered promiscuous mode [ 2653.490792][T14582] device veth0_to_batadv entered promiscuous mode [ 2653.518333][T14582] device batadv_slave_0 entered promiscuous mode 00:09:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0xa}}) [ 2653.540730][T14582] device veth1_to_batadv entered promiscuous mode [ 2653.556699][T14582] device batadv_slave_1 entered promiscuous mode [ 2653.569796][T14582] device veth0_to_hsr entered promiscuous mode [ 2653.585663][T14582] device veth1_to_hsr entered promiscuous mode [ 2653.601539][T14582] device hsr0 entered promiscuous mode [ 2653.627591][T14582] device veth1_virt_wifi entered promiscuous mode 00:09:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r2, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) [ 2653.643341][T14582] device veth0_virt_wifi entered promiscuous mode [ 2653.679635][T14582] device virt_wifi0 entered promiscuous mode [ 2653.700504][T14582] device vlan0 entered promiscuous mode [ 2653.706988][T14582] device vlan1 entered promiscuous mode [ 2653.721072][T14582] device macvlan0 entered promiscuous mode [ 2653.738145][T14582] device macvlan1 entered promiscuous mode [ 2653.752473][T14582] device ipvlan0 entered promiscuous mode [ 2653.758375][T14582] device ipvlan1 entered promiscuous mode [ 2653.765229][T14582] device macvtap0 entered promiscuous mode [ 2653.771277][T14582] device macsec0 entered promiscuous mode [ 2653.777848][T14582] device geneve0 entered promiscuous mode [ 2653.784504][T14582] device geneve1 entered promiscuous mode [ 2653.790364][T14582] device netdevsim0 entered promiscuous mode [ 2653.798388][T14582] device netdevsim1 entered promiscuous mode [ 2653.805340][T14582] device netdevsim2 entered promiscuous mode [ 2653.811479][T14582] device netdevsim3 entered promiscuous mode [ 2653.818446][T14582] device bond1 entered promiscuous mode [ 2653.824903][T14582] device bond2 entered promiscuous mode [ 2653.830542][T14582] device veth2 entered promiscuous mode [ 2653.837663][T14582] device veth3 entered promiscuous mode [ 2653.844081][T14582] device veth4 entered promiscuous mode [ 2653.849777][T14582] device veth5 entered promiscuous mode [ 2653.856434][T14582] device veth6 entered promiscuous mode [ 2653.862939][T14582] device veth7 entered promiscuous mode [ 2653.868576][T14582] device veth8 entered promiscuous mode [ 2653.875388][T14582] device veth9 entered promiscuous mode [ 2653.881017][T14582] device veth10 entered promiscuous mode [ 2653.887856][T14582] device veth11 entered promiscuous mode [ 2653.894421][T14582] device veth12 entered promiscuous mode [ 2653.900201][T14582] device veth13 entered promiscuous mode [ 2653.908554][T14582] device veth14 entered promiscuous mode [ 2653.915143][T14582] device veth15 entered promiscuous mode [ 2653.920865][T14582] device veth16 entered promiscuous mode [ 2653.927909][T14582] device veth17 entered promiscuous mode [ 2653.934475][T14582] device veth18 entered promiscuous mode [ 2653.940239][T14582] device veth19 entered promiscuous mode [ 2653.947098][T14582] device veth20 entered promiscuous mode [ 2653.953664][T14582] device veth21 entered promiscuous mode [ 2653.959388][T14582] device veth22 entered promiscuous mode [ 2653.967057][T14582] device veth23 entered promiscuous mode [ 2653.973629][T14582] device veth24 entered promiscuous mode [ 2653.979376][T14582] device veth25 entered promiscuous mode [ 2653.986256][T14582] device veth26 entered promiscuous mode [ 2653.992041][T14582] device veth27 entered promiscuous mode [ 2653.998738][T14582] device veth28 entered promiscuous mode [ 2654.005240][T14582] device veth29 entered promiscuous mode [ 2654.010964][T14582] device veth30 entered promiscuous mode [ 2654.018575][T14582] device veth31 entered promiscuous mode [ 2654.025066][T14582] device veth32 entered promiscuous mode [ 2654.030805][T14582] device veth33 entered promiscuous mode [ 2654.037411][T14582] device veth34 entered promiscuous mode [ 2654.043890][T14582] device veth35 entered promiscuous mode [ 2654.050181][T14582] device veth36 entered promiscuous mode [ 2654.056966][T14582] device veth37 entered promiscuous mode [ 2654.063486][T14582] device veth38 entered promiscuous mode [ 2654.069242][T14582] device veth39 entered promiscuous mode [ 2654.076004][T14582] device veth40 entered promiscuous mode [ 2654.081718][T14582] device veth41 entered promiscuous mode [ 2654.090037][T14582] device veth42 entered promiscuous mode [ 2654.096582][T14582] device veth43 entered promiscuous mode [ 2654.103053][T14582] device veth44 entered promiscuous mode [ 2654.108854][T14582] device veth45 entered promiscuous mode [ 2654.115788][T14582] device veth46 entered promiscuous mode [ 2654.121541][T14582] device veth47 entered promiscuous mode [ 2654.129428][T14582] device veth48 entered promiscuous mode [ 2654.136034][T14582] device veth49 entered promiscuous mode [ 2654.141759][T14582] device veth50 entered promiscuous mode [ 2654.148284][T14582] device veth51 entered promiscuous mode [ 2654.154844][T14582] device veth52 entered promiscuous mode [ 2654.160604][T14582] device veth53 entered promiscuous mode [ 2654.167263][T14582] device veth54 entered promiscuous mode [ 2654.173833][T14582] device veth55 entered promiscuous mode [ 2654.179585][T14582] device veth56 entered promiscuous mode [ 2654.186229][T14582] device veth57 entered promiscuous mode [ 2654.191986][T14582] device veth58 entered promiscuous mode [ 2654.198697][T14582] device veth59 entered promiscuous mode [ 2654.206075][T14582] device veth60 entered promiscuous mode [ 2654.211804][T14582] device veth61 entered promiscuous mode [ 2654.218592][T14582] device veth62 entered promiscuous mode [ 2654.225092][T14582] device veth63 entered promiscuous mode [ 2654.230799][T14582] device veth64 entered promiscuous mode [ 2654.238848][T14582] device veth65 entered promiscuous mode [ 2654.245415][T14582] device veth66 entered promiscuous mode [ 2654.251789][T14582] device veth67 entered promiscuous mode [ 2654.258609][T14582] device veth68 entered promiscuous mode [ 2654.265039][T14582] device veth69 entered promiscuous mode [ 2654.270775][T14582] device veth70 entered promiscuous mode [ 2654.277692][T14582] device veth71 entered promiscuous mode [ 2654.284141][T14582] device veth72 entered promiscuous mode [ 2654.289862][T14582] device veth73 entered promiscuous mode [ 2654.296795][T14582] device veth74 entered promiscuous mode [ 2654.303314][T14582] device veth75 entered promiscuous mode [ 2654.309187][T14582] device veth76 entered promiscuous mode [ 2654.316113][T14582] device veth77 entered promiscuous mode [ 2654.321861][T14582] device veth78 entered promiscuous mode [ 2654.329327][T14582] device veth79 entered promiscuous mode [ 2654.335855][T14582] device veth80 entered promiscuous mode [ 2654.341631][T14582] device veth81 entered promiscuous mode [ 2654.350071][T14582] device veth82 entered promiscuous mode [ 2654.356635][T14582] device veth83 entered promiscuous mode [ 2654.362952][T14582] device veth84 entered promiscuous mode [ 2654.368978][T14582] device veth85 entered promiscuous mode [ 2654.375916][T14582] device veth86 entered promiscuous mode [ 2654.381701][T14582] device veth87 entered promiscuous mode [ 2654.388332][T14582] device veth88 entered promiscuous mode [ 2654.394889][T14582] device veth89 entered promiscuous mode [ 2654.400643][T14582] device veth90 entered promiscuous mode [ 2654.407760][T14582] device veth91 entered promiscuous mode [ 2654.414338][T14582] device veth92 entered promiscuous mode [ 2654.420059][T14582] device veth93 entered promiscuous mode [ 2654.426718][T14582] device veth94 entered promiscuous mode [ 2654.433178][T14582] device veth95 entered promiscuous mode [ 2654.438909][T14582] device veth96 entered promiscuous mode [ 2654.445440][T14582] device veth97 entered promiscuous mode [ 2654.451148][T14582] device veth98 entered promiscuous mode [ 2654.458877][T14582] device veth99 entered promiscuous mode [ 2654.465122][T14582] device veth100 entered promiscuous mode [ 2654.470940][T14582] device veth101 entered promiscuous mode [ 2654.477804][T14582] device veth102 entered promiscuous mode [ 2654.484283][T14582] device veth103 entered promiscuous mode [ 2654.490103][T14582] device veth104 entered promiscuous mode [ 2654.497005][T14582] device veth105 entered promiscuous mode [ 2654.503450][T14582] device veth106 entered promiscuous mode [ 2654.509283][T14582] device veth107 entered promiscuous mode [ 2654.516135][T14582] device veth108 entered promiscuous mode [ 2654.521950][T14582] device veth109 entered promiscuous mode [ 2654.528517][T14582] device veth110 entered promiscuous mode [ 2654.534989][T14582] device veth111 entered promiscuous mode [ 2654.540818][T14582] device veth112 entered promiscuous mode [ 2654.547375][T14582] device veth113 entered promiscuous mode [ 2654.553878][T14582] device macsec0.0 entered promiscuous mode [ 2654.559869][T14582] device veth114 entered promiscuous mode [ 2654.567422][T14582] device veth115 entered promiscuous mode [ 2654.573839][T14582] device veth116 entered promiscuous mode [ 2654.579706][T14582] device veth117 entered promiscuous mode [ 2654.586169][T14582] device veth118 entered promiscuous mode [ 2654.591998][T14582] device veth119 entered promiscuous mode [ 2654.598610][T14582] device veth120 entered promiscuous mode [ 2654.604914][T14582] device veth121 entered promiscuous mode [ 2654.610734][T14582] device veth122 entered promiscuous mode [ 2654.617264][T14582] device veth123 entered promiscuous mode [ 2654.623714][T14582] device veth124 entered promiscuous mode [ 2654.629548][T14582] device veth125 entered promiscuous mode [ 2654.636650][T14582] device veth126 entered promiscuous mode [ 2654.649286][T14582] device veth127 entered promiscuous mode [ 2654.656044][T14582] device veth128 entered promiscuous mode [ 2654.661860][T14582] device veth129 entered promiscuous mode [ 2654.668477][T14582] device veth130 entered promiscuous mode [ 2654.676678][T14582] device veth131 entered promiscuous mode [ 2654.683045][T14582] device veth132 entered promiscuous mode [ 2654.688866][T14582] device veth133 entered promiscuous mode [ 2654.695581][T14582] device veth134 entered promiscuous mode [ 2654.701413][T14582] device veth135 entered promiscuous mode [ 2654.707944][T14582] device veth136 entered promiscuous mode [ 2654.714429][T14582] device veth137 entered promiscuous mode [ 2654.720261][T14582] device veth138 entered promiscuous mode [ 2654.727065][T14582] device veth139 entered promiscuous mode [ 2654.733553][T14582] device veth140 entered promiscuous mode [ 2654.739383][T14582] device veth141 entered promiscuous mode [ 2654.745917][T14582] device bond3 entered promiscuous mode [ 2654.751599][T14582] device bond4 entered promiscuous mode 00:09:22 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x18}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r4, r2, 0x0, 0x26) 00:09:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x90, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000039a67a23aa7970f7c87218682ee6e8d06e500100000638c7b9916", 0x2f) 00:09:22 executing program 1: prctl$PR_SET_TSC(0x1a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 00:09:22 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 2654.758048][T14582] device veth142 entered promiscuous mode [ 2654.764422][T14582] device veth143 entered promiscuous mode 00:09:22 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 00:09:22 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "400100", 0x8, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xe]}, @local, {[], @ndisc_rs}}}}}, 0x0) 00:09:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c066b800018ec035010000000f089a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727f0f01c90f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x4d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:09:22 executing program 0: clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/235, 0xeb}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 00:09:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128008000100677265"], 0x68}}, 0x0) 00:09:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) 00:09:23 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000140)) [ 2655.134064][T14658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2655.151873][T14658] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 00:09:23 executing program 4: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) 00:09:23 executing program 2: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x33) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0c000000000000dec6648b6e"], &(0x7f00000000c0), 0x1000) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 00:09:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x1, 0x4b564d02, 0x5]}) 00:09:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0xa) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:09:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 00:09:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0xb, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 00:09:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x1, 0x4b564d02]}) 00:09:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x48) 00:09:24 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 00:09:24 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 00:09:24 executing program 4: 00:09:24 executing program 2: 00:09:24 executing program 5: prctl$PR_SET_TSC(0x1a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0x0, &(0x7f00000001c0)={&(0x7f0000000040)="da39410f1c7d18c421f951754dc4c3c90cce5dc4815ddd27d010c4e1cdde08f30faef2c4c18972e30a0f01d7", 0xc0000002, &(0x7f0000000180)="40c197655666660dc462b1926cbc5144dcdd0fc1032e0f7005070000009326400fe5836c00000066f0423131c4a17e16a075000000c4826d3ff9c4e171f8d5", {[0xffffffffffffffee]}}, 0x0, 0x8, &(0x7f0000000300)) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pselect6(0x8, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080), 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) 00:09:24 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x58) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d02, 0x1, 0xc2]}) 00:09:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000030601"], 0x1c}}, 0x0) [ 2656.292629][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2656.340234][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:09:24 executing program 1: 00:09:24 executing program 4: 00:09:24 executing program 2: 00:09:24 executing program 4: 00:09:24 executing program 2: 00:09:25 executing program 0: 00:09:25 executing program 3: 00:09:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x50, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x8, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00?'}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:09:25 executing program 1: 00:09:25 executing program 2: 00:09:25 executing program 5: 00:09:25 executing program 5: 00:09:25 executing program 1: 00:09:25 executing program 3: 00:09:25 executing program 2: 00:09:25 executing program 3: 00:09:25 executing program 2: 00:09:25 executing program 0: 00:09:25 executing program 5: 00:09:28 executing program 2: 00:09:28 executing program 1: 00:09:28 executing program 3: 00:09:28 executing program 5: 00:09:28 executing program 0: 00:09:28 executing program 4: 00:09:28 executing program 3: 00:09:28 executing program 5: 00:09:28 executing program 1: 00:09:28 executing program 2: 00:09:28 executing program 4: 00:09:28 executing program 3: 00:09:28 executing program 5: 00:09:28 executing program 1: 00:09:28 executing program 2: 00:09:28 executing program 5: 00:09:28 executing program 0: 00:09:28 executing program 4: 00:09:28 executing program 3: 00:09:28 executing program 5: 00:09:28 executing program 2: 00:09:28 executing program 1: 00:09:28 executing program 5: 00:09:28 executing program 3: 00:09:28 executing program 1: 00:09:28 executing program 4: 00:09:28 executing program 2: 00:09:28 executing program 4: 00:09:28 executing program 0: 00:09:28 executing program 5: 00:09:28 executing program 3: 00:09:28 executing program 1: 00:09:28 executing program 2: 00:09:28 executing program 4: 00:09:28 executing program 3: 00:09:28 executing program 5: 00:09:28 executing program 2: 00:09:28 executing program 4: 00:09:28 executing program 1: 00:09:28 executing program 5: 00:09:29 executing program 0: 00:09:29 executing program 1: 00:09:29 executing program 5: 00:09:29 executing program 4: 00:09:29 executing program 3: 00:09:29 executing program 2: 00:09:29 executing program 4: 00:09:29 executing program 1: 00:09:29 executing program 5: 00:09:29 executing program 3: 00:09:29 executing program 2: 00:09:29 executing program 1: 00:09:29 executing program 0: 00:09:29 executing program 4: 00:09:29 executing program 3: 00:09:29 executing program 5: 00:09:29 executing program 2: 00:09:29 executing program 1: 00:09:29 executing program 3: 00:09:29 executing program 1: 00:09:29 executing program 5: 00:09:29 executing program 2: 00:09:29 executing program 4: 00:09:29 executing program 1: 00:09:29 executing program 0: 00:09:29 executing program 3: 00:09:29 executing program 2: 00:09:29 executing program 4: 00:09:29 executing program 5: 00:09:29 executing program 1: 00:09:29 executing program 3: 00:09:29 executing program 2: 00:09:29 executing program 1: 00:09:29 executing program 4: 00:09:29 executing program 5: 00:09:29 executing program 3: 00:09:29 executing program 3: 00:09:29 executing program 0: 00:09:29 executing program 4: 00:09:29 executing program 5: 00:09:29 executing program 2: 00:09:29 executing program 1: 00:09:29 executing program 2: 00:09:29 executing program 4: 00:09:29 executing program 1: creat(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:09:29 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2007fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0x108, 0x0, 0x108, 0x248, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @remote, [], [], 'bridge_slave_0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bridge0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3590, 0x1}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb331f3ae839a733f3041901a8d235bd39675399e5719d27a532748"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x1) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8482) 00:09:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 00:09:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) dup2(r0, r1) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:09:30 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x5, [0x91, 0x5, 0xf2c6, 0xfffb, 0x8001]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0xef5, 0x20000000, 0x1f}, &(0x7f0000000100)=0x10) 00:09:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0xc4, 0x10122, 0x0) 00:09:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/248, 0xf8}], 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f7f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:09:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/248, 0xf8}], 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f7f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:09:30 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0xfffffff7, 0x8400) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000100)={0x0, 0x1, 0x4, {0xb}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r7}, &(0x7f00000001c0)=0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x0, @local, 0x1b}]}, &(0x7f0000000180)=0xc) [ 2662.383721][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:09:30 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x4, @sdr}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) 00:09:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/248, 0xf8}], 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f7f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) 00:09:30 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000240)={'macvlan1\x00', {0x2, 0x4e24, @empty}}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0xd6, @dev={0xac, 0x14, 0x14, 0xa}, 0x4e24, 0x4, 'sed\x00', 0x10, 0x5, 0x6e}, {@remote, 0x4e21, 0x2000, 0x1, 0x5, 0x20004f9}}, 0x44) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/43, 0x200007eb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x4, @pix={0x7, 0x3e, 0xb5315241, 0x6, 0x1, 0xff, 0xc, 0x100, 0x0, 0x1, 0x1, 0x7}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1ac, 0xffffffff, 0xffffffff, 0x1ac, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xb4, 0x11c, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @inet=@rpfilter={{0x24, 'rpfilter\x00'}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9abe, 0x10001, 0x5, 'syz1\x00', 'syz0\x00', {0x233e}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) 00:09:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f00000001c0)=""/248, 0xf8}], 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f7f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="db40714d531db941d0f13c7188ca", 0xe}, {&(0x7f0000001d00)="c1eee72364626ff5dc913b29c70fd2f2", 0x10}], 0x2}}], 0x1, 0x0) [ 2662.619131][T14867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:09:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x17, 0x10122, 0x0) 00:09:30 executing program 1: syz_usb_connect(0x0, 0x2f5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050f24810cd0610017e7e010203010902e30201000000000904a7000ff1f45c0009050b08000204078007250100830200090503141000fe028009050e100002150601072501810503000905070000040104040725010204060009050513"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r7, 0x80000001}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fchdir(r0) 00:09:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x5, 0x10122, 0x0) 00:09:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xe23, @multicast2}, 0x10) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100f) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={0x100, 0x6, 0x2, 0x20, 0x162c, 0x4, 0x1ff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x4, @sdr}) 00:09:30 executing program 0: syz_usb_connect(0x0, 0x2f5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000050f24810cd0610017e7e010203010902e30201000000000904a70500f1f45c0200090503141000fe028009050e10000215060107255bed47f448ec544780aececcc8596d200181050300090507000000000000000000000000000000005d0251b07f775249e779ea9c26d548f9dee3e6343852"], 0x0) 00:09:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4112, 0x1010}], 0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}, 0xff000000}], 0x344, 0x10122, 0x0) 00:09:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xe23, @multicast2}, 0x10) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100f) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000100)={0x100, 0x6, 0x2, 0x20, 0x162c, 0x4, 0x1ff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x4, @sdr}) [ 2663.291385][T31462] usb 2-1: new high-speed USB device number 62 using dummy_hcd 00:09:31 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:31 executing program 3 (fault-call:4 fault-nth:0): clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:31 executing program 5 (fault-call:2 fault-nth:0): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2663.426003][T14908] FAULT_INJECTION: forcing a failure. [ 2663.426003][T14908] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.448196][T14908] CPU: 0 PID: 14908 Comm: syz-executor.4 Not tainted 5.8.0-rc4-syzkaller #0 [ 2663.456897][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2663.466964][T14908] Call Trace: [ 2663.470268][T14908] dump_stack+0x18f/0x20d [ 2663.474616][T14908] should_fail.cold+0x5/0x14 [ 2663.479233][T14908] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2663.484960][T14908] should_failslab+0x5/0xf [ 2663.489390][T14908] __kmalloc+0x27d/0x340 [ 2663.493646][T14908] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2663.499211][T14908] tomoyo_realpath_from_path+0xc3/0x620 [ 2663.504773][T14908] ? tomoyo_profile+0x42/0x50 [ 2663.509460][T14908] tomoyo_path_number_perm+0x1cb/0x4d0 [ 2663.514930][T14908] ? tomoyo_path_number_perm+0x183/0x4d0 [ 2663.520576][T14908] ? tomoyo_execute_permission+0x470/0x470 [ 2663.526400][T14908] ? ksys_write+0x212/0x250 [ 2663.530295][T14915] FAULT_INJECTION: forcing a failure. [ 2663.530295][T14915] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.530924][T14908] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2663.549022][T14908] ? __fget_files+0x294/0x400 [ 2663.553714][T14908] security_file_ioctl+0x50/0xb0 [ 2663.558663][T14908] __do_compat_sys_ioctl+0x50/0x230 [ 2663.563875][T14908] do_syscall_32_irqs_on+0x3f/0x60 [ 2663.568988][T14908] do_fast_syscall_32+0x7f/0x120 [ 2663.573925][T14908] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2663.580240][T14908] RIP: 0023:0xf7fcf569 [ 2663.584297][T14908] Code: Bad RIP value. [ 2663.588362][T14908] RSP: 002b:00000000f5dca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2663.596769][T14908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 2663.604736][T14908] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 2663.612707][T14908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2663.620677][T14908] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2663.628641][T14908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2663.636621][T14915] CPU: 1 PID: 14915 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 2663.645302][ T2725] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2663.652840][T14915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2663.662895][T14915] Call Trace: [ 2663.666189][T14915] dump_stack+0x18f/0x20d [ 2663.670525][T14915] should_fail.cold+0x5/0x14 [ 2663.675123][T14915] ? strndup_user+0x70/0xe0 [ 2663.679633][T14915] ? strndup_user+0x70/0xe0 [ 2663.684144][T14915] should_failslab+0x5/0xf [ 2663.688569][T14915] __kmalloc_track_caller+0x27b/0x330 [ 2663.691344][T31462] usb 2-1: Using ep0 maxpacket: 16 [ 2663.693942][T14915] memdup_user+0x22/0xd0 [ 2663.693960][T14915] strndup_user+0x70/0xe0 [ 2663.693980][T14915] copy_mount_string+0x25/0x40 [ 2663.694003][T14915] __ia32_compat_sys_mount+0xf8/0x710 [ 2663.694024][T14915] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2663.723770][T14915] do_syscall_32_irqs_on+0x3f/0x60 [ 2663.728887][T14915] do_fast_syscall_32+0x7f/0x120 [ 2663.733834][T14915] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2663.740166][T14915] RIP: 0023:0xf7fb3569 [ 2663.744227][T14915] Code: Bad RIP value. [ 2663.748295][T14915] RSP: 002b:00000000f5d8d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2663.756706][T14915] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000040 [ 2663.764678][T14915] RDX: 0000000000000000 RSI: 0000000002002000 RDI: 0000000000000000 [ 2663.772659][T14915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2663.780631][T14915] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2663.787579][T14908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2663.788684][T14915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2663.812208][T31462] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 00:09:31 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:31 executing program 5 (fault-call:2 fault-nth:1): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2663.822243][T31462] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2663.846280][T31462] usb 2-1: config 0 has no interface number 0 [ 2663.853408][T31462] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 00:09:31 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2663.873728][T31462] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2663.894282][T31462] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 2663.911383][ T2725] usb 1-1: Using ep0 maxpacket: 16 [ 2663.928591][T31462] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2663.943812][T14921] FAULT_INJECTION: forcing a failure. [ 2663.943812][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.957424][T31462] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2663.967517][T14921] CPU: 0 PID: 14921 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2663.976195][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2663.986256][T14921] Call Trace: [ 2663.990518][T14921] dump_stack+0x18f/0x20d [ 2663.994864][T14921] should_fail.cold+0x5/0x14 [ 2663.999479][T14921] should_failslab+0x5/0xf [ 2664.003909][T14921] kmem_cache_alloc_node+0x257/0x3c0 [ 2664.009209][T14921] __alloc_skb+0x71/0x550 [ 2664.013554][T14921] netlink_sendmsg+0x94f/0xd90 [ 2664.018334][T14921] ? netlink_unicast+0x7d0/0x7d0 [ 2664.023289][T14921] ? netlink_unicast+0x7d0/0x7d0 [ 2664.028247][T14921] sock_sendmsg+0xcf/0x120 [ 2664.032672][T14921] ____sys_sendmsg+0x6e8/0x810 [ 2664.037446][T14921] ? kernel_sendmsg+0x50/0x50 [ 2664.042129][T14921] ? do_recvmmsg+0x6d0/0x6d0 [ 2664.046733][T14921] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2664.052723][T14921] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2664.058710][T14921] ___sys_sendmsg+0xf3/0x170 [ 2664.063314][T14921] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.068607][T14921] ? __fget_files+0x272/0x400 [ 2664.073297][T14921] ? lock_downgrade+0x820/0x820 [ 2664.078156][T14921] ? find_held_lock+0x2d/0x110 [ 2664.082937][T14921] ? ksys_write+0x212/0x250 [ 2664.087451][T14921] ? __fget_files+0x294/0x400 [ 2664.092140][T14921] ? __fget_light+0xea/0x280 [ 2664.096734][T14921] __sys_sendmsg+0xe5/0x1b0 [ 2664.101245][T14921] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2664.106272][T14921] ? lock_is_held_type+0xb0/0xe0 [ 2664.111205][T14921] ? do_fast_syscall_32+0x40/0x120 [ 2664.116317][T14921] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2664.116341][T14920] FAULT_INJECTION: forcing a failure. [ 2664.116341][T14920] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.122296][T14921] do_syscall_32_irqs_on+0x3f/0x60 [ 2664.122314][T14921] do_fast_syscall_32+0x7f/0x120 [ 2664.122334][T14921] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2664.122346][T14921] RIP: 0023:0xf7f97569 [ 2664.122352][T14921] Code: Bad RIP value. [ 2664.122360][T14921] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2664.122374][T14921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2664.122382][T14921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2664.122389][T14921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2664.122397][T14921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2664.122411][T14921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2664.208333][T14920] CPU: 1 PID: 14920 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 2664.209602][T31462] usb 2-1: config 0 interface 167 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 2664.217004][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2664.217010][T14920] Call Trace: [ 2664.217030][T14920] dump_stack+0x18f/0x20d [ 2664.217050][T14920] should_fail.cold+0x5/0x14 [ 2664.217069][T14920] should_failslab+0x5/0xf [ 2664.217089][T14920] kmem_cache_alloc+0x2a9/0x3b0 [ 2664.262654][T14920] getname_flags.part.0+0x50/0x4f0 [ 2664.267767][T14920] ? __might_fault+0x11f/0x1d0 [ 2664.272530][ T2725] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 2664.272544][T14920] user_path_at_empty+0xa1/0x100 [ 2664.272565][T14920] do_mount+0x140/0x1fb0 [ 2664.280722][ T2725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2664.285618][T14920] ? copy_mount_string+0x40/0x40 [ 2664.285631][T14920] ? __might_fault+0x190/0x1d0 [ 2664.285646][T14920] ? _copy_from_user+0x138/0x190 [ 2664.285663][T14920] ? memdup_user+0x7c/0xd0 [ 2664.285677][T14920] ? strndup_user+0xc0/0xe0 [ 2664.285702][T14920] __ia32_compat_sys_mount+0x193/0x710 [ 2664.300850][ T2725] usb 1-1: config 0 has no interface number 0 [ 2664.304896][T14920] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2664.304918][T14920] do_syscall_32_irqs_on+0x3f/0x60 [ 2664.304934][T14920] do_fast_syscall_32+0x7f/0x120 [ 2664.304957][T14920] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2664.304969][T14920] RIP: 0023:0xf7fb3569 [ 2664.304974][T14920] Code: Bad RIP value. [ 2664.304981][T14920] RSP: 002b:00000000f5dae0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2664.304995][T14920] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000040 [ 2664.305003][T14920] RDX: 0000000000000000 RSI: 0000000002002000 RDI: 0000000000000000 [ 2664.305018][T14920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2664.321815][ T2725] usb 1-1: config 0 interface 167 has no altsetting 0 [ 2664.323562][T14920] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2664.323571][T14920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2664.502325][T31462] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=7e.7e [ 2664.515367][T31462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.524881][T31462] usb 2-1: Product: syz [ 2664.529078][T31462] usb 2-1: Manufacturer: syz [ 2664.534912][T31462] usb 2-1: SerialNumber: syz [ 2664.545711][T31462] usb 2-1: config 0 descriptor?? [ 2664.587017][T31462] keyspan 2-1:0.167: Keyspan 2 port adapter converter detected [ 2664.595312][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 87 [ 2664.604279][ T2725] usb 1-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=7e.7e [ 2664.613812][T31462] keyspan 2-1:0.167: unsupported endpoint type 0 [ 2664.620314][ T2725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.629831][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 81 [ 2664.638215][ T2725] usb 1-1: Product: syz [ 2664.651255][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 1 [ 2664.659918][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 2 [ 2664.668179][ T2725] usb 1-1: Manufacturer: syz [ 2664.673159][ T2725] usb 1-1: SerialNumber: syz [ 2664.683375][ T2725] usb 1-1: config 0 descriptor?? [ 2664.688837][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 85 [ 2664.703264][T31462] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2664.726688][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 83 [ 2664.751278][T31462] keyspan 2-1:0.167: unsupported endpoint type 0 [ 2664.761607][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 4 [ 2664.769441][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 86 [ 2664.809870][T31462] keyspan 2-1:0.167: found no endpoint descriptor for endpoint 6 [ 2664.820889][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2664.839382][T31462] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2664.909998][T31462] usb 2-1: USB disconnect, device number 62 [ 2664.925739][T31462] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2664.938883][T31462] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2664.953208][T31462] keyspan 2-1:0.167: device disconnected [ 2665.061907][ T2725] keyspan 1-1:0.167: Keyspan 2 port adapter converter detected [ 2665.069714][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 87 [ 2665.087712][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 7 [ 2665.101025][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 81 [ 2665.116005][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 1 [ 2665.130600][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 2 [ 2665.143900][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 85 [ 2665.152325][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 5 [ 2665.165334][ T2725] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2665.195132][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 83 [ 2665.203457][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 3 [ 2665.221272][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 4 [ 2665.250062][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 86 [ 2665.258093][ T2725] keyspan 1-1:0.167: found no endpoint descriptor for endpoint 6 [ 2665.272873][ T2725] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2665.292212][ T2725] usb 1-1: USB disconnect, device number 13 [ 2665.321341][ T2725] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2665.346683][ T2725] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2665.390755][ T2725] keyspan 1-1:0.167: device disconnected 00:09:33 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:33 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2665.504847][T14991] FAULT_INJECTION: forcing a failure. [ 2665.504847][T14991] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.517537][T14991] CPU: 1 PID: 14991 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2665.526215][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.536271][T14991] Call Trace: [ 2665.539570][T14991] dump_stack+0x18f/0x20d [ 2665.543914][T14991] should_fail.cold+0x5/0x14 [ 2665.548515][T14991] ? rwlock_bug.part.0+0x90/0x90 [ 2665.553455][T14991] should_failslab+0x5/0xf [ 2665.557861][T14991] kmem_cache_alloc+0x40/0x3b0 [ 2665.562622][T14991] sctp_get_port_local+0x3ec/0x1410 [ 2665.567823][T14991] ? get_order+0x20/0x20 [ 2665.572047][T14991] ? __ipv6_addr_type+0x20d/0x330 [ 2665.577059][T14991] ? sctp_bind_addr_match+0x1d5/0x2c0 [ 2665.582430][T14991] sctp_do_bind+0x208/0x5c0 [ 2665.586938][T14991] ? memset+0x20/0x40 [ 2665.590915][T14991] sctp_connect_new_asoc+0x5a4/0x770 [ 2665.596188][T14991] ? sctp_bind+0xd0/0xd0 [ 2665.600430][T14991] ? __ipv6_addr_type+0x20d/0x330 [ 2665.605448][T14991] ? __ipv6_addr_type+0x20d/0x330 [ 2665.610469][T14991] __sctp_connect+0x3e2/0xc00 [ 2665.615138][T14991] ? sctp_connect_new_asoc+0x770/0x770 [ 2665.620598][T14991] ? __local_bh_enable_ip+0x159/0x250 [ 2665.625976][T14991] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2665.641259][T14991] ? lock_sock_nested+0x94/0x110 [ 2665.646196][T14991] ? trace_hardirqs_on+0x5f/0x220 [ 2665.651238][T14991] sctp_inet_connect+0x14b/0x1b0 [ 2665.656180][T14991] ? __sctp_connect+0xc00/0xc00 [ 2665.661033][T14991] __sys_connect_file+0x155/0x1a0 [ 2665.666062][T14991] __sys_connect+0x160/0x190 [ 2665.670659][T14991] ? __sys_connect_file+0x1a0/0x1a0 [ 2665.675873][T14991] ? vfs_write+0x1b0/0x6b0 [ 2665.680301][T14991] ? fput_many+0x2f/0x1a0 [ 2665.684640][T14991] ? ksys_write+0x1a5/0x250 [ 2665.690148][T14991] ? __ia32_sys_read+0xb0/0xb0 [ 2665.694921][T14991] ? lock_is_held_type+0xb0/0xe0 [ 2665.699870][T14991] __ia32_sys_connect+0x6e/0xb0 00:09:33 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:09:33 executing program 5 (fault-call:2 fault-nth:2): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:33 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2665.704730][T14991] do_syscall_32_irqs_on+0x3f/0x60 [ 2665.709850][T14991] do_fast_syscall_32+0x7f/0x120 [ 2665.714883][T14991] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 00:09:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:33 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:33 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x1261, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:33 executing program 2 (fault-call:1 fault-nth:3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:33 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2665.722154][T14991] RIP: 0023:0xf7f88569 [ 2665.722161][T14991] Code: Bad RIP value. [ 2665.722170][T14991] RSP: 002b:00000000f5d830cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2665.722186][T14991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000208c0000 00:09:34 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x4, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:34 executing program 2 (fault-call:1 fault-nth:4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2665.722195][T14991] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2665.722204][T14991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2665.722213][T14991] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2665.722222][T14991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2665.776121][T14999] FAULT_INJECTION: forcing a failure. [ 2665.776121][T14999] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.776142][T14999] CPU: 0 PID: 14999 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2665.776152][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.776158][T14999] Call Trace: [ 2665.776179][T14999] dump_stack+0x18f/0x20d [ 2665.776202][T14999] should_fail.cold+0x5/0x14 [ 2665.776223][T14999] should_failslab+0x5/0xf [ 2665.776242][T14999] kmem_cache_alloc_node_trace+0x27d/0x400 [ 2665.776267][T14999] __kmalloc_node_track_caller+0x38/0x60 [ 2665.776286][T14999] __alloc_skb+0xae/0x550 [ 2665.776306][T14999] netlink_sendmsg+0x94f/0xd90 [ 2665.776327][T14999] ? netlink_unicast+0x7d0/0x7d0 [ 2665.776351][T14999] ? netlink_unicast+0x7d0/0x7d0 [ 2665.776371][T14999] sock_sendmsg+0xcf/0x120 [ 2665.776390][T14999] ____sys_sendmsg+0x6e8/0x810 [ 2665.776410][T14999] ? kernel_sendmsg+0x50/0x50 [ 2665.776424][T14999] ? do_recvmmsg+0x6d0/0x6d0 [ 2665.776445][T14999] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2665.776464][T14999] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2665.776482][T14999] ___sys_sendmsg+0xf3/0x170 [ 2665.776496][T14999] ? sendmsg_copy_msghdr+0x160/0x160 [ 2665.776509][T14999] ? __fget_files+0x272/0x400 [ 2665.776524][T14999] ? lock_downgrade+0x820/0x820 [ 2665.776538][T14999] ? find_held_lock+0x2d/0x110 [ 2665.776551][T14999] ? ksys_write+0x212/0x250 [ 2665.776571][T14999] ? __fget_files+0x294/0x400 [ 2665.776592][T14999] ? __fget_light+0xea/0x280 [ 2665.776613][T14999] __sys_sendmsg+0xe5/0x1b0 [ 2665.776627][T14999] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2665.776656][T14999] ? lock_is_held_type+0xb0/0xe0 [ 2665.776674][T14999] ? do_fast_syscall_32+0x40/0x120 [ 2665.776691][T14999] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2665.776713][T14999] do_syscall_32_irqs_on+0x3f/0x60 [ 2665.776730][T14999] do_fast_syscall_32+0x7f/0x120 [ 2665.776749][T14999] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2665.776761][T14999] RIP: 0023:0xf7f97569 [ 2665.776767][T14999] Code: Bad RIP value. [ 2665.776775][T14999] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2665.776790][T14999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2665.776799][T14999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2665.776817][T14999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2665.776826][T14999] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2665.776835][T14999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2665.816204][T15002] FAULT_INJECTION: forcing a failure. [ 2665.816204][T15002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2665.816224][T15002] CPU: 1 PID: 15002 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 2665.816233][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.816239][T15002] Call Trace: [ 2665.816259][T15002] dump_stack+0x18f/0x20d [ 2665.816281][T15002] should_fail.cold+0x5/0x14 [ 2665.816312][T15002] __alloc_pages_nodemask+0x1a3/0x930 [ 2665.816330][T15002] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2665.816352][T15002] ? stack_trace_save+0x8c/0xc0 [ 2665.816375][T15002] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2665.816396][T15002] ? lock_acquire+0x1f1/0xad0 [ 2665.816413][T15002] ? fs_reclaim_acquire+0xf/0x40 [ 2665.816431][T15002] ? find_held_lock+0x2d/0x110 [ 2665.816453][T15002] cache_grow_begin+0x8c/0xb20 [ 2665.816472][T15002] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 2665.816493][T15002] cache_alloc_refill+0x27b/0x340 [ 2665.816512][T15002] ? lockdep_hardirqs_off+0x66/0xa0 [ 2665.816533][T15002] kmem_cache_alloc+0x38e/0x3b0 [ 2665.816555][T15002] getname_flags.part.0+0x50/0x4f0 [ 2665.816569][T15002] ? __might_fault+0x11f/0x1d0 [ 2665.816590][T15002] user_path_at_empty+0xa1/0x100 [ 2665.816610][T15002] do_mount+0x140/0x1fb0 [ 2665.816635][T15002] ? copy_mount_string+0x40/0x40 [ 2665.816648][T15002] ? __might_fault+0x190/0x1d0 [ 2665.816663][T15002] ? _copy_from_user+0x138/0x190 [ 2665.816682][T15002] ? memdup_user+0x7c/0xd0 [ 2665.816698][T15002] ? strndup_user+0xc0/0xe0 [ 2665.816720][T15002] __ia32_compat_sys_mount+0x193/0x710 [ 2665.816737][T15002] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2665.816759][T15002] do_syscall_32_irqs_on+0x3f/0x60 [ 2665.816775][T15002] do_fast_syscall_32+0x7f/0x120 [ 2665.816794][T15002] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2665.816806][T15002] RIP: 0023:0xf7fb3569 [ 2665.816813][T15002] Code: Bad RIP value. [ 2665.816821][T15002] RSP: 002b:00000000f5d8d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2665.816835][T15002] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000040 [ 2665.816844][T15002] RDX: 0000000000000000 RSI: 0000000002002000 RDI: 0000000000000000 [ 2665.816853][T15002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2665.816862][T15002] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2665.816871][T15002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2665.934046][T15007] FAULT_INJECTION: forcing a failure. [ 2665.934046][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.934097][T15007] CPU: 1 PID: 15007 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2665.934107][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.934113][T15007] Call Trace: [ 2665.934134][T15007] dump_stack+0x18f/0x20d [ 2665.934157][T15007] should_fail.cold+0x5/0x14 [ 2665.934180][T15007] should_failslab+0x5/0xf [ 2665.934198][T15007] kmem_cache_alloc_trace+0x240/0x2d0 [ 2665.934220][T15007] ip_set_create+0x453/0x13c0 [ 2665.934245][T15007] ? ip_set_sockfn_get+0xe00/0xe00 [ 2665.934303][T15007] ? lock_is_held_type+0xb0/0xe0 [ 2665.934319][T15007] ? ip_set_sockfn_get+0xe00/0xe00 [ 2665.934339][T15007] nfnetlink_rcv_msg+0xbe8/0xea0 [ 2665.934371][T15007] ? nfnetlink_rcv+0x420/0x420 [ 2665.934389][T15007] ? is_bpf_text_address+0xcb/0x160 [ 2665.934420][T15007] ? __lock_acquire+0xc1e/0x56e0 [ 2665.934453][T15007] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2665.934473][T15007] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2665.934495][T15007] netlink_rcv_skb+0x15a/0x430 [ 2665.934512][T15007] ? nfnetlink_rcv+0x420/0x420 [ 2665.934535][T15007] ? netlink_ack+0xa10/0xa10 [ 2665.934562][T15007] ? ns_capable+0xde/0x100 [ 2665.934583][T15007] nfnetlink_rcv+0x1ac/0x420 [ 2665.934600][T15007] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2665.934624][T15007] netlink_unicast+0x533/0x7d0 [ 2665.934644][T15007] ? netlink_attachskb+0x810/0x810 [ 2665.934660][T15007] ? _copy_from_iter_full+0x247/0x890 [ 2665.934675][T15007] ? __phys_addr+0x9a/0x110 [ 2665.934691][T15007] ? __phys_addr_symbol+0x2c/0x70 [ 2665.934708][T15007] ? __check_object_size+0x171/0x3e4 [ 2665.934728][T15007] netlink_sendmsg+0x856/0xd90 [ 2665.934749][T15007] ? netlink_unicast+0x7d0/0x7d0 [ 2665.934775][T15007] ? netlink_unicast+0x7d0/0x7d0 [ 2665.934793][T15007] sock_sendmsg+0xcf/0x120 [ 2665.934812][T15007] ____sys_sendmsg+0x6e8/0x810 [ 2665.934833][T15007] ? kernel_sendmsg+0x50/0x50 [ 2665.934846][T15007] ? do_recvmmsg+0x6d0/0x6d0 [ 2665.934867][T15007] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2665.934890][T15007] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2665.934908][T15007] ___sys_sendmsg+0xf3/0x170 [ 2665.934925][T15007] ? sendmsg_copy_msghdr+0x160/0x160 [ 2665.934941][T15007] ? __fget_files+0x272/0x400 [ 2665.934962][T15007] ? lock_downgrade+0x820/0x820 [ 2665.934979][T15007] ? find_held_lock+0x2d/0x110 [ 2665.934996][T15007] ? ksys_write+0x212/0x250 [ 2665.935017][T15007] ? __fget_files+0x294/0x400 [ 2665.935041][T15007] ? __fget_light+0xea/0x280 [ 2665.935062][T15007] __sys_sendmsg+0xe5/0x1b0 [ 2665.935078][T15007] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2665.935108][T15007] ? lock_is_held_type+0xb0/0xe0 [ 2665.935126][T15007] ? do_fast_syscall_32+0x40/0x120 [ 2665.935143][T15007] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2665.935166][T15007] do_syscall_32_irqs_on+0x3f/0x60 [ 2665.935182][T15007] do_fast_syscall_32+0x7f/0x120 [ 2665.935202][T15007] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2665.935215][T15007] RIP: 0023:0xf7f97569 [ 2665.935221][T15007] Code: Bad RIP value. [ 2665.935230][T15007] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2665.935246][T15007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2665.935255][T15007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2665.935264][T15007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2665.935274][T15007] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2665.935283][T15007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2665.968948][T15009] FAULT_INJECTION: forcing a failure. [ 2665.968948][T15009] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.969014][T15009] CPU: 1 PID: 15009 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2665.969024][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.969029][T15009] Call Trace: [ 2665.969052][T15009] dump_stack+0x18f/0x20d [ 2665.969076][T15009] should_fail.cold+0x5/0x14 [ 2665.969098][T15009] should_failslab+0x5/0xf [ 2665.969117][T15009] kmem_cache_alloc_trace+0x47/0x2d0 [ 2665.969139][T15009] sctp_add_bind_addr+0x8c/0x370 [ 2665.969162][T15009] sctp_do_bind+0x2f0/0x5c0 [ 2665.969181][T15009] ? memset+0x20/0x40 [ 2665.969203][T15009] sctp_connect_new_asoc+0x5a4/0x770 [ 2665.969222][T15009] ? sctp_bind+0xd0/0xd0 [ 2665.969243][T15009] ? __ipv6_addr_type+0x20d/0x330 [ 2665.969257][T15009] ? __ipv6_addr_type+0x20d/0x330 [ 2665.969280][T15009] __sctp_connect+0x3e2/0xc00 [ 2665.969314][T15009] ? sctp_connect_new_asoc+0x770/0x770 [ 2665.969334][T15009] ? __local_bh_enable_ip+0x159/0x250 [ 2665.969353][T15009] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2665.969369][T15009] ? lock_sock_nested+0x94/0x110 [ 2665.969384][T15009] ? trace_hardirqs_on+0x5f/0x220 [ 2665.969407][T15009] sctp_inet_connect+0x14b/0x1b0 [ 2665.969425][T15009] ? __sctp_connect+0xc00/0xc00 [ 2665.969443][T15009] __sys_connect_file+0x155/0x1a0 [ 2665.969464][T15009] __sys_connect+0x160/0x190 [ 2665.969483][T15009] ? __sys_connect_file+0x1a0/0x1a0 [ 2665.969502][T15009] ? vfs_write+0x1b0/0x6b0 [ 2665.969521][T15009] ? fput_many+0x2f/0x1a0 [ 2665.969537][T15009] ? ksys_write+0x1a5/0x250 [ 2665.969553][T15009] ? __ia32_sys_read+0xb0/0xb0 [ 2665.969572][T15009] ? lock_is_held_type+0xb0/0xe0 [ 2665.969594][T15009] __ia32_sys_connect+0x6e/0xb0 [ 2665.969615][T15009] do_syscall_32_irqs_on+0x3f/0x60 [ 2665.969631][T15009] do_fast_syscall_32+0x7f/0x120 [ 2665.969651][T15009] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2665.969663][T15009] RIP: 0023:0xf7f88569 [ 2665.969669][T15009] Code: Bad RIP value. [ 2665.969677][T15009] RSP: 002b:00000000f5d830cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2665.969692][T15009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000208c0000 [ 2665.969702][T15009] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2665.969711][T15009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2665.969724][T15009] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2665.969734][T15009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.057740][T15012] FAULT_INJECTION: forcing a failure. [ 2666.057740][T15012] name failslab, interval 1, probability 0, space 0, times 0 [ 2666.057759][T15012] CPU: 1 PID: 15012 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2666.057766][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2666.057771][T15012] Call Trace: [ 2666.057790][T15012] dump_stack+0x18f/0x20d [ 2666.057809][T15012] should_fail.cold+0x5/0x14 [ 2666.057829][T15012] should_failslab+0x5/0xf [ 2666.057844][T15012] kmem_cache_alloc_trace+0x240/0x2d0 [ 2666.057862][T15012] hash_ip_create+0x44b/0xf30 [ 2666.057882][T15012] ? hash_ip6_list+0xf10/0xf10 [ 2666.057899][T15012] ip_set_create+0x6a2/0x13c0 [ 2666.057923][T15012] ? ip_set_sockfn_get+0xe00/0xe00 [ 2666.057969][T15012] ? lock_is_held_type+0xb0/0xe0 [ 2666.057987][T15012] ? ip_set_sockfn_get+0xe00/0xe00 [ 2666.058006][T15012] nfnetlink_rcv_msg+0xbe8/0xea0 [ 2666.058034][T15012] ? nfnetlink_rcv+0x420/0x420 [ 2666.058052][T15012] ? is_bpf_text_address+0xcb/0x160 [ 2666.058081][T15012] ? __lock_acquire+0xc1e/0x56e0 [ 2666.058113][T15012] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2666.058133][T15012] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2666.058155][T15012] netlink_rcv_skb+0x15a/0x430 [ 2666.058172][T15012] ? nfnetlink_rcv+0x420/0x420 [ 2666.058189][T15012] ? netlink_ack+0xa10/0xa10 [ 2666.058223][T15012] ? ns_capable+0xde/0x100 [ 2666.058246][T15012] nfnetlink_rcv+0x1ac/0x420 [ 2666.058264][T15012] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2666.058295][T15012] netlink_unicast+0x533/0x7d0 [ 2666.058317][T15012] ? netlink_attachskb+0x810/0x810 [ 2666.058334][T15012] ? _copy_from_iter_full+0x247/0x890 [ 2666.058349][T15012] ? __phys_addr+0x9a/0x110 [ 2666.058364][T15012] ? __phys_addr_symbol+0x2c/0x70 [ 2666.058381][T15012] ? __check_object_size+0x171/0x3e4 [ 2666.058400][T15012] netlink_sendmsg+0x856/0xd90 [ 2666.058420][T15012] ? netlink_unicast+0x7d0/0x7d0 [ 2666.058446][T15012] ? netlink_unicast+0x7d0/0x7d0 [ 2666.058464][T15012] sock_sendmsg+0xcf/0x120 [ 2666.058483][T15012] ____sys_sendmsg+0x6e8/0x810 [ 2666.058504][T15012] ? kernel_sendmsg+0x50/0x50 [ 2666.058516][T15012] ? do_recvmmsg+0x6d0/0x6d0 [ 2666.058537][T15012] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2666.058559][T15012] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2666.058577][T15012] ___sys_sendmsg+0xf3/0x170 [ 2666.058593][T15012] ? sendmsg_copy_msghdr+0x160/0x160 [ 2666.058607][T15012] ? __fget_files+0x272/0x400 [ 2666.058625][T15012] ? lock_downgrade+0x820/0x820 [ 2666.058641][T15012] ? find_held_lock+0x2d/0x110 [ 2666.058656][T15012] ? ksys_write+0x212/0x250 [ 2666.058677][T15012] ? __fget_files+0x294/0x400 [ 2666.058700][T15012] ? __fget_light+0xea/0x280 [ 2666.058720][T15012] __sys_sendmsg+0xe5/0x1b0 [ 2666.058734][T15012] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2666.058761][T15012] ? lock_is_held_type+0xb0/0xe0 [ 2666.058777][T15012] ? do_fast_syscall_32+0x40/0x120 [ 2666.058794][T15012] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2666.058815][T15012] do_syscall_32_irqs_on+0x3f/0x60 [ 2666.058830][T15012] do_fast_syscall_32+0x7f/0x120 [ 2666.058850][T15012] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2666.058863][T15012] RIP: 0023:0xf7f97569 [ 2666.058869][T15012] Code: Bad RIP value. [ 2666.058878][T15012] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2666.058893][T15012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2666.058903][T15012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2666.058912][T15012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2666.058921][T15012] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2666.058930][T15012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.177765][T15015] FAULT_INJECTION: forcing a failure. [ 2666.177765][T15015] name failslab, interval 1, probability 0, space 0, times 0 [ 2666.177786][T15015] CPU: 1 PID: 15015 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2666.177797][T15015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2666.177802][T15015] Call Trace: [ 2666.177823][T15015] dump_stack+0x18f/0x20d [ 2666.177847][T15015] should_fail.cold+0x5/0x14 [ 2666.177869][T15015] should_failslab+0x5/0xf [ 2666.177887][T15015] kmem_cache_alloc_trace+0x240/0x2d0 [ 2666.177911][T15015] sctp_association_new+0x8a/0x2050 [ 2666.177932][T15015] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2666.177952][T15015] ? sctp_v6_scope+0x5a/0x70 [ 2666.177974][T15015] sctp_connect_new_asoc+0x1ac/0x770 [ 2666.177993][T15015] ? sctp_bind+0xd0/0xd0 [ 2666.178013][T15015] ? __ipv6_addr_type+0x20d/0x330 [ 2666.178027][T15015] ? __ipv6_addr_type+0x20d/0x330 [ 2666.178051][T15015] __sctp_connect+0x3e2/0xc00 [ 2666.178077][T15015] ? sctp_connect_new_asoc+0x770/0x770 [ 2666.178096][T15015] ? __local_bh_enable_ip+0x159/0x250 [ 2666.178115][T15015] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2666.178131][T15015] ? lock_sock_nested+0x94/0x110 [ 2666.178145][T15015] ? trace_hardirqs_on+0x5f/0x220 [ 2666.178168][T15015] sctp_inet_connect+0x14b/0x1b0 [ 2666.178185][T15015] ? __sctp_connect+0xc00/0xc00 [ 2666.178212][T15015] __sys_connect_file+0x155/0x1a0 [ 2666.178232][T15015] __sys_connect+0x160/0x190 [ 2666.178250][T15015] ? __sys_connect_file+0x1a0/0x1a0 [ 2666.178269][T15015] ? vfs_write+0x1b0/0x6b0 [ 2666.178288][T15015] ? fput_many+0x2f/0x1a0 [ 2666.178304][T15015] ? ksys_write+0x1a5/0x250 [ 2666.178320][T15015] ? __ia32_sys_read+0xb0/0xb0 [ 2666.178339][T15015] ? lock_is_held_type+0xb0/0xe0 [ 2666.178362][T15015] __ia32_sys_connect+0x6e/0xb0 [ 2666.178382][T15015] do_syscall_32_irqs_on+0x3f/0x60 [ 2666.178399][T15015] do_fast_syscall_32+0x7f/0x120 [ 2666.178419][T15015] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2666.178432][T15015] RIP: 0023:0xf7f88569 [ 2666.178438][T15015] Code: Bad RIP value. [ 2666.178447][T15015] RSP: 002b:00000000f5d830cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2666.178463][T15015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000208c0000 [ 2666.178472][T15015] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2666.178481][T15015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2666.178490][T15015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2666.178500][T15015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.329240][T15018] FAULT_INJECTION: forcing a failure. [ 2666.329240][T15018] name failslab, interval 1, probability 0, space 0, times 0 [ 2666.329261][T15018] CPU: 0 PID: 15018 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2666.329270][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2666.329276][T15018] Call Trace: [ 2666.329296][T15018] dump_stack+0x18f/0x20d [ 2666.329321][T15018] should_fail.cold+0x5/0x14 [ 2666.329342][T15018] ? ip_set_alloc+0x33/0x60 [ 2666.329358][T15018] should_failslab+0x5/0xf [ 2666.329376][T15018] __kmalloc+0x27d/0x340 [ 2666.329396][T15018] ip_set_alloc+0x33/0x60 [ 2666.329413][T15018] hash_ip_create+0x4e8/0xf30 [ 2666.329433][T15018] ? hash_ip6_list+0xf10/0xf10 [ 2666.329451][T15018] ip_set_create+0x6a2/0x13c0 [ 2666.329474][T15018] ? ip_set_sockfn_get+0xe00/0xe00 [ 2666.329519][T15018] ? lock_is_held_type+0xb0/0xe0 [ 2666.329535][T15018] ? ip_set_sockfn_get+0xe00/0xe00 [ 2666.329552][T15018] nfnetlink_rcv_msg+0xbe8/0xea0 [ 2666.329583][T15018] ? nfnetlink_rcv+0x420/0x420 [ 2666.329602][T15018] ? is_bpf_text_address+0xcb/0x160 [ 2666.329633][T15018] ? __lock_acquire+0xc1e/0x56e0 [ 2666.329661][T15018] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2666.329680][T15018] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2666.329709][T15018] netlink_rcv_skb+0x15a/0x430 [ 2666.329727][T15018] ? nfnetlink_rcv+0x420/0x420 [ 2666.329743][T15018] ? netlink_ack+0xa10/0xa10 [ 2666.329771][T15018] ? ns_capable+0xde/0x100 [ 2666.329792][T15018] nfnetlink_rcv+0x1ac/0x420 [ 2666.329810][T15018] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2666.329835][T15018] netlink_unicast+0x533/0x7d0 [ 2666.329856][T15018] ? netlink_attachskb+0x810/0x810 [ 2666.329872][T15018] ? _copy_from_iter_full+0x247/0x890 [ 2666.329888][T15018] ? __phys_addr+0x9a/0x110 [ 2666.329904][T15018] ? __phys_addr_symbol+0x2c/0x70 [ 2666.329921][T15018] ? __check_object_size+0x171/0x3e4 [ 2666.329941][T15018] netlink_sendmsg+0x856/0xd90 [ 2666.329963][T15018] ? netlink_unicast+0x7d0/0x7d0 [ 2666.329988][T15018] ? netlink_unicast+0x7d0/0x7d0 [ 2666.330006][T15018] sock_sendmsg+0xcf/0x120 [ 2666.330026][T15018] ____sys_sendmsg+0x6e8/0x810 [ 2666.330046][T15018] ? kernel_sendmsg+0x50/0x50 [ 2666.330059][T15018] ? do_recvmmsg+0x6d0/0x6d0 [ 2666.330081][T15018] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2666.330102][T15018] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2666.330120][T15018] ___sys_sendmsg+0xf3/0x170 [ 2666.330137][T15018] ? sendmsg_copy_msghdr+0x160/0x160 [ 2666.330152][T15018] ? __fget_files+0x272/0x400 [ 2666.330172][T15018] ? lock_downgrade+0x820/0x820 [ 2666.330189][T15018] ? find_held_lock+0x2d/0x110 [ 2666.330205][T15018] ? ksys_write+0x212/0x250 [ 2666.330224][T15018] ? __fget_files+0x294/0x400 [ 2666.330247][T15018] ? __fget_light+0xea/0x280 [ 2666.330270][T15018] __sys_sendmsg+0xe5/0x1b0 [ 2666.330285][T15018] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2666.330314][T15018] ? lock_is_held_type+0xb0/0xe0 [ 2666.330332][T15018] ? do_fast_syscall_32+0x40/0x120 [ 2666.330350][T15018] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2666.330372][T15018] do_syscall_32_irqs_on+0x3f/0x60 [ 2666.330389][T15018] do_fast_syscall_32+0x7f/0x120 [ 2666.330408][T15018] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2666.330427][T15018] RIP: 0023:0xf7f97569 [ 2666.330433][T15018] Code: Bad RIP value. [ 2666.330442][T15018] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 00:09:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:09:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4b67, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:36 executing program 1 (fault-call:2 fault-nth:3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:36 executing program 5 (fault-call:2 fault-nth:3): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:36 executing program 2 (fault-call:1 fault-nth:5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:36 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x8, r0, 0x0, &(0x7f0000001140)=""/4090) [ 2666.330458][T15018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2666.330467][T15018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2666.330476][T15018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2666.330485][T15018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2666.330495][T15018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2668.435035][T15027] FAULT_INJECTION: forcing a failure. [ 2668.435035][T15027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2668.448269][T15027] CPU: 0 PID: 15027 Comm: syz-executor.1 Not tainted 5.8.0-rc4-syzkaller #0 [ 2668.457384][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.462809][T15032] FAULT_INJECTION: forcing a failure. [ 2668.462809][T15032] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.467436][T15027] Call Trace: [ 2668.467461][T15027] dump_stack+0x18f/0x20d [ 2668.467484][T15027] should_fail.cold+0x5/0x14 [ 2668.467507][T15027] __alloc_pages_nodemask+0x1a3/0x930 [ 2668.467529][T15027] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.504635][T15027] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2668.507205][T15034] FAULT_INJECTION: forcing a failure. [ 2668.507205][T15034] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.511410][T15027] ? lock_acquire+0x1f1/0xad0 [ 2668.511428][T15027] ? fs_reclaim_acquire+0xf/0x40 [ 2668.511444][T15027] ? find_held_lock+0x2d/0x110 [ 2668.511465][T15027] cache_grow_begin+0x8c/0xb20 [ 2668.511484][T15027] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 2668.511501][T15027] cache_alloc_refill+0x27b/0x340 [ 2668.511534][T15027] ? lockdep_hardirqs_off+0x66/0xa0 [ 2668.511555][T15027] kmem_cache_alloc_trace+0x2bd/0x2d0 [ 2668.564950][T15027] sctp_association_new+0x8a/0x2050 [ 2668.570145][T15027] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2668.576051][T15027] ? sctp_v6_scope+0x5a/0x70 [ 2668.580644][T15027] sctp_connect_new_asoc+0x1ac/0x770 [ 2668.585928][T15027] ? sctp_bind+0xd0/0xd0 [ 2668.590172][T15027] ? __ipv6_addr_type+0x20d/0x330 [ 2668.595184][T15027] ? __ipv6_addr_type+0x20d/0x330 [ 2668.600205][T15027] __sctp_connect+0x3e2/0xc00 [ 2668.604885][T15027] ? sctp_connect_new_asoc+0x770/0x770 [ 2668.610341][T15027] ? __local_bh_enable_ip+0x159/0x250 [ 2668.615708][T15027] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2668.621683][T15027] ? lock_sock_nested+0x94/0x110 [ 2668.626616][T15027] ? trace_hardirqs_on+0x5f/0x220 [ 2668.632590][T15027] sctp_inet_connect+0x14b/0x1b0 [ 2668.637528][T15027] ? __sctp_connect+0xc00/0xc00 [ 2668.642385][T15027] __sys_connect_file+0x155/0x1a0 [ 2668.647422][T15027] __sys_connect+0x160/0x190 [ 2668.652229][T15027] ? __sys_connect_file+0x1a0/0x1a0 [ 2668.657422][T15027] ? vfs_write+0x1b0/0x6b0 [ 2668.661842][T15027] ? fput_many+0x2f/0x1a0 [ 2668.666192][T15027] ? ksys_write+0x1a5/0x250 [ 2668.670701][T15027] ? __ia32_sys_read+0xb0/0xb0 [ 2668.675640][T15027] ? lock_is_held_type+0xb0/0xe0 [ 2668.680752][T15027] __ia32_sys_connect+0x6e/0xb0 [ 2668.685604][T15027] do_syscall_32_irqs_on+0x3f/0x60 [ 2668.690714][T15027] do_fast_syscall_32+0x7f/0x120 [ 2668.695647][T15027] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2668.701964][T15027] RIP: 0023:0xf7f88569 [ 2668.706015][T15027] Code: Bad RIP value. [ 2668.710071][T15027] RSP: 002b:00000000f5d830cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 2668.718472][T15027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000208c0000 [ 2668.726448][T15027] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 2668.734410][T15027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2668.742391][T15027] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2668.750351][T15027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2668.758334][T15034] CPU: 1 PID: 15034 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 2668.768054][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.778111][T15034] Call Trace: [ 2668.781411][T15034] dump_stack+0x18f/0x20d 00:09:36 executing program 2 (fault-call:1 fault-nth:6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2668.785755][T15034] should_fail.cold+0x5/0x14 [ 2668.790355][T15034] should_failslab+0x5/0xf 00:09:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:36 executing program 2 (fault-call:1 fault-nth:7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:36 executing program 5 (fault-call:2 fault-nth:4): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5409, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2668.795675][T15034] kmem_cache_alloc+0x2a9/0x3b0 [ 2668.795692][T15034] __d_alloc+0x2a/0x920 [ 2668.795706][T15034] ? __lock_acquire+0x16e3/0x56e0 [ 2668.795722][T15034] d_alloc+0x4a/0x230 [ 2668.795744][T15034] d_alloc_parallel+0xe9/0x18e0 [ 2668.795761][T15034] ? __lock_acquire+0x16e3/0x56e0 00:09:37 executing program 2 (fault-call:1 fault-nth:8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2668.795790][T15034] ? __d_lookup_rcu+0x6a0/0x6a0 [ 2668.795807][T15034] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.795823][T15034] ? lockref_get_not_dead+0x66/0x80 [ 2668.795841][T15034] ? lockdep_init_map_waits+0x26a/0x890 [ 2668.795855][T15034] ? lockdep_init_map_waits+0x26a/0x890 [ 2668.795868][T15034] ? __raw_spin_lock_init+0x34/0x100 [ 2668.795889][T15034] __lookup_slow+0x193/0x480 [ 2668.795902][T15034] ? do_raw_spin_unlock+0x171/0x230 [ 2668.795918][T15034] ? read_seqcount_begin+0x270/0x270 [ 2668.795952][T15034] ? inode_permission.part.0+0xab/0x410 [ 2668.795974][T15034] walk_component+0x418/0x6a0 [ 2668.795991][T15034] ? handle_dots.part.0+0x14d0/0x14d0 [ 2668.796008][T15034] ? walk_component+0x6a0/0x6a0 [ 2668.796023][T15034] ? percpu_ref_put_many+0x80/0xf0 [ 2668.796046][T15034] path_lookupat+0x1ba/0x830 [ 2668.796068][T15034] filename_lookup+0x19f/0x560 [ 2668.796086][T15034] ? nd_jump_link+0x360/0x360 [ 2668.796111][T15034] ? __check_object_size+0x171/0x3e4 [ 2668.796129][T15034] ? strncpy_from_user+0x2bf/0x3e0 [ 2668.796149][T15034] ? getname_flags.part.0+0x1dd/0x4f0 [ 2668.796162][T15034] ? __might_fault+0x11f/0x1d0 [ 2668.796185][T15034] do_mount+0x140/0x1fb0 [ 2668.796208][T15034] ? copy_mount_string+0x40/0x40 [ 2668.796220][T15034] ? __might_fault+0x190/0x1d0 [ 2668.796235][T15034] ? _copy_from_user+0x138/0x190 [ 2668.796252][T15034] ? memdup_user+0x7c/0xd0 [ 2668.796267][T15034] ? strndup_user+0xc0/0xe0 [ 2668.796287][T15034] __ia32_compat_sys_mount+0x193/0x710 [ 2668.796303][T15034] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2668.796325][T15034] do_syscall_32_irqs_on+0x3f/0x60 [ 2668.796342][T15034] do_fast_syscall_32+0x7f/0x120 [ 2668.796360][T15034] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2668.796372][T15034] RIP: 0023:0xf7fb3569 [ 2668.796378][T15034] Code: Bad RIP value. [ 2668.796385][T15034] RSP: 002b:00000000f5d8d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2668.796398][T15034] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000040 [ 2668.796405][T15034] RDX: 0000000000000000 RSI: 0000000002002000 RDI: 0000000000000000 [ 2668.796412][T15034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2668.796419][T15034] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2668.796426][T15034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2668.796957][T15032] CPU: 0 PID: 15032 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 00:09:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x9, 0x2, 0x2, {0x3}, 0x6, 0x7}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:09:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x540a, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2668.796967][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.796973][T15032] Call Trace: [ 2668.796991][T15032] dump_stack+0x18f/0x20d [ 2668.797012][T15032] should_fail.cold+0x5/0x14 [ 2668.797033][T15032] ? ip_set_alloc+0x33/0x60 [ 2668.797045][T15032] should_failslab+0x5/0xf [ 2668.797060][T15032] __kmalloc+0x27d/0x340 [ 2668.797077][T15032] ip_set_alloc+0x33/0x60 [ 2668.797095][T15032] hash_ip_create+0x536/0xf30 [ 2668.797122][T15032] ? hash_ip6_list+0xf10/0xf10 [ 2668.797138][T15032] ip_set_create+0x6a2/0x13c0 [ 2668.797158][T15032] ? ip_set_sockfn_get+0xe00/0xe00 [ 2668.797204][T15032] ? lock_is_held_type+0xb0/0xe0 [ 2668.797217][T15032] ? ip_set_sockfn_get+0xe00/0xe00 [ 2668.797235][T15032] nfnetlink_rcv_msg+0xbe8/0xea0 [ 2668.797264][T15032] ? nfnetlink_rcv+0x420/0x420 [ 2668.797282][T15032] ? is_bpf_text_address+0xcb/0x160 [ 2668.797312][T15032] ? __lock_acquire+0xc1e/0x56e0 [ 2668.797343][T15032] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.797363][T15032] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2668.797383][T15032] netlink_rcv_skb+0x15a/0x430 [ 2668.797399][T15032] ? nfnetlink_rcv+0x420/0x420 [ 2668.797415][T15032] ? netlink_ack+0xa10/0xa10 [ 2668.797444][T15032] ? ns_capable+0xde/0x100 [ 2668.797463][T15032] nfnetlink_rcv+0x1ac/0x420 [ 2668.797478][T15032] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2668.797500][T15032] netlink_unicast+0x533/0x7d0 [ 2668.797519][T15032] ? netlink_attachskb+0x810/0x810 [ 2668.797537][T15032] ? _copy_from_iter_full+0x247/0x890 [ 2668.797555][T15032] ? __phys_addr+0x9a/0x110 [ 2668.797572][T15032] ? __phys_addr_symbol+0x2c/0x70 [ 2668.797589][T15032] ? __check_object_size+0x171/0x3e4 [ 2668.797607][T15032] netlink_sendmsg+0x856/0xd90 [ 2668.797627][T15032] ? netlink_unicast+0x7d0/0x7d0 [ 2668.797653][T15032] ? netlink_unicast+0x7d0/0x7d0 [ 2668.797672][T15032] sock_sendmsg+0xcf/0x120 [ 2668.797690][T15032] ____sys_sendmsg+0x6e8/0x810 [ 2668.797709][T15032] ? kernel_sendmsg+0x50/0x50 [ 2668.797724][T15032] ? do_recvmmsg+0x6d0/0x6d0 [ 2668.797742][T15032] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.797761][T15032] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.797778][T15032] ___sys_sendmsg+0xf3/0x170 [ 2668.797794][T15032] ? sendmsg_copy_msghdr+0x160/0x160 [ 2668.797810][T15032] ? __fget_files+0x272/0x400 [ 2668.797828][T15032] ? lock_downgrade+0x820/0x820 [ 2668.797845][T15032] ? find_held_lock+0x2d/0x110 [ 2668.797862][T15032] ? ksys_write+0x212/0x250 [ 2668.797880][T15032] ? __fget_files+0x294/0x400 [ 2668.797906][T15032] ? __fget_light+0xea/0x280 [ 2668.797931][T15032] __sys_sendmsg+0xe5/0x1b0 [ 2668.797947][T15032] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2668.797975][T15032] ? lock_is_held_type+0xb0/0xe0 [ 2668.797992][T15032] ? do_fast_syscall_32+0x40/0x120 [ 2668.798010][T15032] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2668.798030][T15032] do_syscall_32_irqs_on+0x3f/0x60 [ 2668.798047][T15032] do_fast_syscall_32+0x7f/0x120 [ 2668.798065][T15032] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2668.798080][T15032] RIP: 0023:0xf7f97569 [ 2668.798090][T15032] Code: Bad RIP value. [ 2668.798102][T15032] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2668.798127][T15032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2668.798140][T15032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2668.798152][T15032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2668.798164][T15032] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2668.798176][T15032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2668.863093][T15042] ptrace attach of "/root/syz-executor.3"[15031] was attempted by "/root/syz-executor.3"[15042] 00:09:37 executing program 5 (fault-call:2 fault-nth:5): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2668.930126][T15044] FAULT_INJECTION: forcing a failure. [ 2668.930126][T15044] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.930148][T15044] CPU: 1 PID: 15044 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2668.930158][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.930164][T15044] Call Trace: [ 2668.930184][T15044] dump_stack+0x18f/0x20d [ 2668.930206][T15044] should_fail.cold+0x5/0x14 [ 2668.930228][T15044] should_failslab+0x5/0xf [ 2668.930246][T15044] kmem_cache_alloc_node+0x257/0x3c0 [ 2668.930269][T15044] __alloc_skb+0x71/0x550 [ 2668.930289][T15044] netlink_ack+0x331/0xa10 [ 2668.930307][T15044] ? netlink_sendmsg+0xd90/0xd90 [ 2668.930325][T15044] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.930345][T15044] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2668.930363][T15044] netlink_rcv_skb+0x344/0x430 [ 2668.930378][T15044] ? nfnetlink_rcv+0x420/0x420 [ 2668.930393][T15044] ? netlink_ack+0xa10/0xa10 [ 2668.930418][T15044] ? ns_capable+0xde/0x100 [ 2668.930447][T15044] nfnetlink_rcv+0x1ac/0x420 [ 2668.930469][T15044] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2668.930493][T15044] netlink_unicast+0x533/0x7d0 [ 2668.930513][T15044] ? netlink_attachskb+0x810/0x810 [ 2668.930530][T15044] ? _copy_from_iter_full+0x247/0x890 [ 2668.930546][T15044] ? __phys_addr+0x9a/0x110 [ 2668.930559][T15044] ? __phys_addr_symbol+0x2c/0x70 [ 2668.930573][T15044] ? __check_object_size+0x171/0x3e4 [ 2668.930589][T15044] netlink_sendmsg+0x856/0xd90 [ 2668.930611][T15044] ? netlink_unicast+0x7d0/0x7d0 [ 2668.930636][T15044] ? netlink_unicast+0x7d0/0x7d0 [ 2668.930655][T15044] sock_sendmsg+0xcf/0x120 [ 2668.930674][T15044] ____sys_sendmsg+0x6e8/0x810 [ 2668.930698][T15044] ? kernel_sendmsg+0x50/0x50 [ 2668.930711][T15044] ? do_recvmmsg+0x6d0/0x6d0 [ 2668.930730][T15044] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.930751][T15044] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2668.930768][T15044] ___sys_sendmsg+0xf3/0x170 [ 2668.930784][T15044] ? sendmsg_copy_msghdr+0x160/0x160 [ 2668.930798][T15044] ? __fget_files+0x272/0x400 [ 2668.930818][T15044] ? lock_downgrade+0x820/0x820 [ 2668.930836][T15044] ? find_held_lock+0x2d/0x110 [ 2668.930852][T15044] ? ksys_write+0x212/0x250 [ 2668.930872][T15044] ? __fget_files+0x294/0x400 [ 2668.930894][T15044] ? __fget_light+0xea/0x280 [ 2668.930914][T15044] __sys_sendmsg+0xe5/0x1b0 [ 2668.930930][T15044] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2668.930958][T15044] ? lock_is_held_type+0xb0/0xe0 [ 2668.930975][T15044] ? do_fast_syscall_32+0x40/0x120 [ 2668.930992][T15044] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2668.931013][T15044] do_syscall_32_irqs_on+0x3f/0x60 [ 2668.931029][T15044] do_fast_syscall_32+0x7f/0x120 [ 2668.931048][T15044] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2668.931060][T15044] RIP: 0023:0xf7f97569 [ 2668.931066][T15044] Code: Bad RIP value. [ 2668.931074][T15044] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2668.931090][T15044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2668.931100][T15044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2668.931109][T15044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2668.931118][T15044] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2668.931128][T15044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2669.065382][T15048] FAULT_INJECTION: forcing a failure. [ 2669.065382][T15048] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.065403][T15048] CPU: 1 PID: 15048 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2669.065413][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.065418][T15048] Call Trace: [ 2669.065445][T15048] dump_stack+0x18f/0x20d [ 2669.065468][T15048] should_fail.cold+0x5/0x14 [ 2669.065490][T15048] should_failslab+0x5/0xf [ 2669.065509][T15048] kmem_cache_alloc_node_trace+0x27d/0x400 [ 2669.065533][T15048] __kmalloc_node_track_caller+0x38/0x60 [ 2669.065554][T15048] __alloc_skb+0xae/0x550 [ 2669.065573][T15048] netlink_ack+0x331/0xa10 [ 2669.065592][T15048] ? netlink_sendmsg+0xd90/0xd90 [ 2669.065611][T15048] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2669.065632][T15048] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2669.065650][T15048] netlink_rcv_skb+0x344/0x430 [ 2669.065666][T15048] ? nfnetlink_rcv+0x420/0x420 [ 2669.065682][T15048] ? netlink_ack+0xa10/0xa10 [ 2669.065707][T15048] ? ns_capable+0xde/0x100 [ 2669.065727][T15048] nfnetlink_rcv+0x1ac/0x420 [ 2669.065744][T15048] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2669.065767][T15048] netlink_unicast+0x533/0x7d0 [ 2669.065787][T15048] ? netlink_attachskb+0x810/0x810 [ 2669.065803][T15048] ? _copy_from_iter_full+0x247/0x890 [ 2669.065819][T15048] ? __phys_addr+0x9a/0x110 [ 2669.065836][T15048] ? __phys_addr_symbol+0x2c/0x70 [ 2669.065854][T15048] ? __check_object_size+0x171/0x3e4 [ 2669.065874][T15048] netlink_sendmsg+0x856/0xd90 [ 2669.065894][T15048] ? netlink_unicast+0x7d0/0x7d0 [ 2669.065918][T15048] ? netlink_unicast+0x7d0/0x7d0 [ 2669.065937][T15048] sock_sendmsg+0xcf/0x120 [ 2669.065956][T15048] ____sys_sendmsg+0x6e8/0x810 [ 2669.065977][T15048] ? kernel_sendmsg+0x50/0x50 [ 2669.065989][T15048] ? do_recvmmsg+0x6d0/0x6d0 [ 2669.066011][T15048] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2669.066033][T15048] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2669.066050][T15048] ___sys_sendmsg+0xf3/0x170 [ 2669.066067][T15048] ? sendmsg_copy_msghdr+0x160/0x160 [ 2669.066081][T15048] ? __fget_files+0x272/0x400 [ 2669.066102][T15048] ? lock_downgrade+0x820/0x820 [ 2669.066119][T15048] ? find_held_lock+0x2d/0x110 [ 2669.066135][T15048] ? ksys_write+0x212/0x250 [ 2669.066156][T15048] ? __fget_files+0x294/0x400 [ 2669.066178][T15048] ? __fget_light+0xea/0x280 [ 2669.066198][T15048] __sys_sendmsg+0xe5/0x1b0 [ 2669.066213][T15048] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2669.066243][T15048] ? lock_is_held_type+0xb0/0xe0 [ 2669.066260][T15048] ? do_fast_syscall_32+0x40/0x120 [ 2669.066277][T15048] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2669.066299][T15048] do_syscall_32_irqs_on+0x3f/0x60 [ 2669.066315][T15048] do_fast_syscall_32+0x7f/0x120 [ 2669.066335][T15048] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2669.066348][T15048] RIP: 0023:0xf7f97569 [ 2669.066354][T15048] Code: Bad RIP value. [ 2669.066363][T15048] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2669.066378][T15048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2669.066388][T15048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2669.066396][T15048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2669.066405][T15048] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2669.066414][T15048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2669.143678][T15053] FAULT_INJECTION: forcing a failure. [ 2669.143678][T15053] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.143699][T15053] CPU: 0 PID: 15053 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 2669.143709][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.143715][T15053] Call Trace: [ 2669.143736][T15053] dump_stack+0x18f/0x20d [ 2669.143759][T15053] should_fail.cold+0x5/0x14 [ 2669.143782][T15053] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2669.143803][T15053] should_failslab+0x5/0xf [ 2669.143819][T15053] __kmalloc+0x27d/0x340 [ 2669.143838][T15053] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2669.143857][T15053] tomoyo_realpath_from_path+0xc3/0x620 [ 2669.143871][T15053] ? tomoyo_fill_path_info+0x227/0x410 [ 2669.143891][T15053] tomoyo_mount_acl+0x14e/0x840 [ 2669.143908][T15053] ? __lock_acquire+0xc1e/0x56e0 [ 2669.143938][T15053] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 2669.143965][T15053] ? lockdep_hardirqs_off+0x66/0xa0 [ 2669.143982][T15053] ? trace_hardirqs_off+0x27/0x210 [ 2669.144022][T15053] ? putname+0xe1/0x120 [ 2669.144043][T15053] ? tomoyo_domain+0xb9/0x150 [ 2669.144058][T15053] ? tomoyo_profile+0x42/0x50 [ 2669.144080][T15053] tomoyo_mount_permission+0x151/0x3f0 [ 2669.144094][T15053] ? tomoyo_mount_permission+0xfa/0x3f0 [ 2669.144109][T15053] ? tomoyo_mount_acl+0x840/0x840 [ 2669.144139][T15053] security_sb_mount+0x66/0xc0 [ 2669.144158][T15053] do_mount+0x1c0/0x1fb0 [ 2669.144180][T15053] ? copy_mount_string+0x40/0x40 [ 2669.144200][T15053] ? __might_fault+0x190/0x1d0 [ 2669.144215][T15053] ? _copy_from_user+0x138/0x190 [ 2669.144233][T15053] ? memdup_user+0x7c/0xd0 [ 2669.144250][T15053] ? strndup_user+0xc0/0xe0 [ 2669.144273][T15053] __ia32_compat_sys_mount+0x193/0x710 [ 2669.144291][T15053] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2669.144313][T15053] do_syscall_32_irqs_on+0x3f/0x60 [ 2669.144330][T15053] do_fast_syscall_32+0x7f/0x120 [ 2669.144350][T15053] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2669.144363][T15053] RIP: 0023:0xf7fb3569 [ 2669.144369][T15053] Code: Bad RIP value. [ 2669.144377][T15053] RSP: 002b:00000000f5d8d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2669.144393][T15053] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000040 [ 2669.144402][T15053] RDX: 0000000000000000 RSI: 0000000002002000 RDI: 0000000000000000 [ 2669.144411][T15053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2669.144421][T15053] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2669.144431][T15053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2669.154865][T15053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2669.239481][T15055] FAULT_INJECTION: forcing a failure. [ 2669.239481][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.980274][T15061] FAULT_INJECTION: forcing a failure. [ 2669.980274][T15061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2670.002820][T15055] CPU: 0 PID: 15055 Comm: syz-executor.2 Not tainted 5.8.0-rc4-syzkaller #0 [ 2670.730930][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2670.740975][T15055] Call Trace: [ 2670.744257][T15055] dump_stack+0x18f/0x20d [ 2670.748573][T15055] should_fail.cold+0x5/0x14 [ 2670.753149][T15055] should_failslab+0x5/0xf [ 2670.757547][T15055] kmem_cache_alloc_node+0x257/0x3c0 [ 2670.762823][T15055] __alloc_skb+0x71/0x550 [ 2670.767135][T15055] netlink_ack+0x331/0xa10 [ 2670.771558][T15055] ? netlink_sendmsg+0xd90/0xd90 [ 2670.776581][T15055] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2670.782544][T15055] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2670.788431][T15055] netlink_rcv_skb+0x344/0x430 [ 2670.793175][T15055] ? nfnetlink_rcv+0x420/0x420 [ 2670.797920][T15055] ? netlink_ack+0xa10/0xa10 [ 2670.802500][T15055] ? ns_capable+0xde/0x100 [ 2670.806899][T15055] nfnetlink_rcv+0x1ac/0x420 [ 2670.811480][T15055] ? nfnetlink_rcv_batch+0x1de0/0x1de0 [ 2670.816923][T15055] netlink_unicast+0x533/0x7d0 [ 2670.821678][T15055] ? netlink_attachskb+0x810/0x810 [ 2670.826775][T15055] ? _copy_from_iter_full+0x247/0x890 [ 2670.832129][T15055] ? __phys_addr+0x9a/0x110 [ 2670.836612][T15055] ? __phys_addr_symbol+0x2c/0x70 [ 2670.841620][T15055] ? __check_object_size+0x171/0x3e4 [ 2670.846902][T15055] netlink_sendmsg+0x856/0xd90 [ 2670.851649][T15055] ? netlink_unicast+0x7d0/0x7d0 [ 2670.856574][T15055] ? netlink_unicast+0x7d0/0x7d0 [ 2670.861507][T15055] sock_sendmsg+0xcf/0x120 [ 2670.865907][T15055] ____sys_sendmsg+0x6e8/0x810 [ 2670.870654][T15055] ? kernel_sendmsg+0x50/0x50 [ 2670.875312][T15055] ? do_recvmmsg+0x6d0/0x6d0 [ 2670.879887][T15055] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2670.886459][T15055] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 2670.892429][T15055] ___sys_sendmsg+0xf3/0x170 [ 2670.897003][T15055] ? sendmsg_copy_msghdr+0x160/0x160 [ 2670.902268][T15055] ? __fget_files+0x272/0x400 [ 2670.906929][T15055] ? lock_downgrade+0x820/0x820 [ 2670.911767][T15055] ? find_held_lock+0x2d/0x110 [ 2670.916513][T15055] ? ksys_write+0x212/0x250 [ 2670.921002][T15055] ? __fget_files+0x294/0x400 [ 2670.925664][T15055] ? __fget_light+0xea/0x280 [ 2670.930258][T15055] __sys_sendmsg+0xe5/0x1b0 [ 2670.934743][T15055] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2670.939773][T15055] ? lock_is_held_type+0xb0/0xe0 [ 2670.944694][T15055] ? do_fast_syscall_32+0x40/0x120 [ 2670.949788][T15055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2670.955761][T15055] do_syscall_32_irqs_on+0x3f/0x60 [ 2670.960861][T15055] do_fast_syscall_32+0x7f/0x120 [ 2670.965783][T15055] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2670.972088][T15055] RIP: 0023:0xf7f97569 [ 2670.976133][T15055] Code: Bad RIP value. [ 2670.980178][T15055] RSP: 002b:00000000f5d920cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2670.988572][T15055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2670.996526][T15055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2671.004477][T15055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2671.012439][T15055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2671.020391][T15055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2671.028381][T15061] CPU: 1 PID: 15061 Comm: syz-executor.5 Not tainted 5.8.0-rc4-syzkaller #0 [ 2671.037063][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2671.047139][T15061] Call Trace: [ 2671.050444][T15061] dump_stack+0x18f/0x20d 00:09:39 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x10, r0, 0x0, &(0x7f0000001140)=""/4090) [ 2671.054786][T15061] should_fail.cold+0x5/0x14 [ 2671.059383][T15061] ? __ia32_compat_sys_mount+0x193/0x710 [ 2671.065027][T15061] __alloc_pages_nodemask+0x1a3/0x930 [ 2671.070416][T15061] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2671.077194][T15061] ? __kernel_text_address+0x9/0x30 [ 2671.082401][T15061] ? unwind_get_return_address+0x51/0x90 [ 2671.088049][T15061] ? profile_setup.cold+0xc1/0xc1 [ 2671.093077][T15061] ? arch_stack_walk+0x97/0xf0 [ 2671.097858][T15061] cache_grow_begin+0x8c/0xb20 00:09:39 executing program 2 (fault-call:1 fault-nth:9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x2, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x3, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2671.103570][T15061] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 2671.103593][T15061] cache_alloc_refill+0x27b/0x340 [ 2671.103610][T15061] ? lockdep_hardirqs_off+0x66/0xa0 [ 2671.103629][T15061] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2671.103642][T15061] __kmalloc+0x319/0x340 [ 2671.103663][T15061] tomoyo_realpath_from_path+0xc3/0x620 [ 2671.103681][T15061] ? tomoyo_fill_path_info+0x227/0x410 [ 2671.103700][T15061] tomoyo_mount_acl+0x14e/0x840 [ 2671.103717][T15061] ? __lock_acquire+0xc1e/0x56e0 [ 2671.103739][T15061] ? tomoyo_check_mount_acl+0x1a0/0x1a0 [ 2671.103761][T15061] ? lockdep_hardirqs_off+0x66/0xa0 [ 2671.103777][T15061] ? trace_hardirqs_off+0x27/0x210 [ 2671.103816][T15061] ? putname+0xe1/0x120 [ 2671.103834][T15061] ? tomoyo_domain+0xb9/0x150 [ 2671.103848][T15061] ? tomoyo_profile+0x42/0x50 [ 2671.103868][T15061] tomoyo_mount_permission+0x151/0x3f0 [ 2671.103883][T15061] ? tomoyo_mount_permission+0xfa/0x3f0 [ 2671.103899][T15061] ? tomoyo_mount_acl+0x840/0x840 [ 2671.103932][T15061] security_sb_mount+0x66/0xc0 [ 2671.103953][T15061] do_mount+0x1c0/0x1fb0 [ 2671.103985][T15061] ? copy_mount_string+0x40/0x40 [ 2671.103997][T15061] ? __might_fault+0x190/0x1d0 [ 2671.104012][T15061] ? _copy_from_user+0x138/0x190 [ 2671.104029][T15061] ? memdup_user+0x7c/0xd0 [ 2671.104044][T15061] ? strndup_user+0xc0/0xe0 [ 2671.104064][T15061] __ia32_compat_sys_mount+0x193/0x710 [ 2671.104081][T15061] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2671.104101][T15061] do_syscall_32_irqs_on+0x3f/0x60 [ 2671.104117][T15061] do_fast_syscall_32+0x7f/0x120 [ 2671.104134][T15061] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2671.104146][T15061] RIP: 0023:0xf7fb3569 [ 2671.104152][T15061] Code: Bad RIP value. [ 2671.104160][T15061] RSP: 002b:00000000f5d8d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2671.104174][T15061] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000040 [ 2671.104183][T15061] RDX: 0000000000000000 RSI: 0000000002002000 RDI: 0000000000000000 [ 2671.104191][T15061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 00:09:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000140)) dup2(r1, r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000200)=0x7e6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)) 00:09:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x4, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2671.104199][T15061] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2671.104208][T15061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:09:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:39 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x5, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x50, r1, 0x7f000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) getpeername$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) 00:09:39 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x11, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x6, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x7, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x6364, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002002, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x8, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:40 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x4206, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:40 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) dup2(r2, 0xffffffffffffffff) 00:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x9, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:40 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002003, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xb, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x10, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2673.248354][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2673.429369][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:41 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x4207, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x14, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005c00000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'team0\x00', r6}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0xf0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:09:41 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002004, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x25, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x42d, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2674.074195][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0x4e23, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2674.372028][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:42 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0xa, 0x0, @loopback}, 0x1c) 00:09:42 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002005, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000c4000000000047ba1fd7dbc127ecb92c2b792b7e0a77e6176ee04fccc4eba0984d2b0360a4837cd8277308beaa2882de6e51fae45aaaecf07674c2714c71b762b8e405503679da1e1a7c075c37765d0cc376a89373c8bd38157961ed245bc5375dc1b2e75f77f110", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x128, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:updpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x801}, 0x40001) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xbc, r7, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) dup2(r1, r0) openat$rtc(0xffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x220181, 0x0) 00:09:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8920, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2d04, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2675.115293][T15261] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2675.345617][T15261] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2675.356929][T15270] syztnl0: mtu greater than device maximum 00:09:43 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x2000, &(0x7f0000001140)=""/4090) 00:09:43 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002006, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x63, 0x0, @loopback}, 0x1c) 00:09:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$unix(r2, &(0x7f00000000c0)=""/22, 0x16, 0x2100, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x14000858}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="eb000000ffffffff000000000900010068667363000087d400d7e900028f7c71c5325f4a3e3e54b5f056fbadbafaebc6141aaf02937c1aa8491a2713f151b5645ca54d23ea181b27b48e0ff66cd78b61411edf46aa33548e700450041494a1123b6879992402b2c1951a46b3fe33fed7"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) fdatasync(r4) dup2(r1, r0) [ 2675.821485][T15281] À: renamed from syztnl0 00:09:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2675.989395][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2676.073523][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2676.290944][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2676.315791][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:44 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x3f00, &(0x7f0000001140)=""/4090) 00:09:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:44 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002007, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}) dup2(r1, r0) 00:09:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 00:09:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8932, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:45 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x4000, &(0x7f0000001140)=""/4090) 00:09:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8937, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x42d0000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x800000080004105) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYRESOCT=r2, @ANYRES16=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500000020e12cb8091b9e3a549ee586bb89eafcd39b4d374ccdad37afc7fbf535092c32adb8047e2c5b2df65dbe824e26920351b5479d997f", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x2004c841}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x800000080004105) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1af5, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f}, @ldst={0x2, 0x1, 0x2, 0x0, 0x4, 0x10, 0x10}], &(0x7f0000000100)='GPL\x00', 0x20, 0xb9, &(0x7f00000001c0)=""/185, 0x40f00, 0xa, [], r7, 0xb, r9, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x8, 0x4, 0x79}, 0x10, 0xffffffffffffffff}, 0x74) dup2(r1, r0) 00:09:45 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002008, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) 00:09:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x9000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:46 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x200000, &(0x7f0000001140)=""/4090) 00:09:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:46 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002500, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x101000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f00000001c0)={0x9d0000, 0x4, 0x1, r0, 0x0, &(0x7f0000000140)={0x9909dd, 0xd5, [], @value64=0x8}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r2, r0) socket$caif_seqpacket(0x25, 0x5, 0x3) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) 00:09:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) 00:09:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8948, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8949, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:09:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:47 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x3f000000, &(0x7f0000001140)=""/4090) 00:09:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8970, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:47 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002f00, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:47 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x464, 0x3f3, 0x2, 0x70bd2c, 0x25dfdbfc, {0x3, 0x2, 0x32, [0x0, 0xfa9, 0xe5, 0x0, 0x1, 0xef, 0x401, 0x2, 0x2, 0x5, 0x7f, 0x6, 0x20, 0xc63, 0x9, 0x5, 0x2, 0x8, 0x80000001, 0x9, 0x3, 0xffffffff, 0x1, 0x6, 0xff, 0x2, 0x5, 0x4, 0x4, 0x2, 0x1, 0x6f, 0x4, 0x8, 0x0, 0x47, 0xff, 0x9, 0x10001, 0x3, 0x0, 0x80000001, 0xffffffc0, 0x9, 0x0, 0x1ba, 0x9, 0x7, 0xffff, 0x0, 0x8001, 0x1, 0x7fffffff, 0x5, 0x800, 0x5, 0x10000, 0x9, 0x49ca, 0x5, 0x3, 0xffffffff, 0x401], [0x4, 0x170, 0x4c6, 0x8, 0x6, 0xfffff801, 0x9, 0x7fff, 0x9, 0x3, 0x0, 0x8e, 0x5, 0x0, 0x9, 0x5, 0x1649, 0x2, 0x5b27, 0x8, 0x7ff, 0x6, 0x4, 0x2, 0x9, 0x1, 0x9, 0xfff, 0x8000, 0xffffffff, 0x1, 0x9, 0xa8, 0x1000, 0xffff80da, 0xbe2e, 0x3, 0x7a5, 0x1d6b, 0x9, 0x6, 0x0, 0x3, 0x80, 0x2, 0x26714a05, 0xb2b0, 0x0, 0x0, 0x1ff, 0x2, 0x4000, 0x4, 0x400, 0x2, 0x7ff, 0x9, 0x9, 0x800, 0x2, 0xa7d, 0x33, 0x4, 0x7fffffff], [0x4, 0x3, 0x1b7, 0x1, 0x7, 0xc00, 0x0, 0xbe9, 0x7, 0x2, 0x0, 0xfffffeff, 0x7fff, 0x40000, 0xfff, 0x7, 0x878, 0x8, 0x80000000, 0x6591, 0x1, 0xeeb, 0x5, 0x84, 0x8001, 0x7, 0xfffffff9, 0xfffffff9, 0x5, 0x3, 0xffffffff, 0x101, 0x4fc4, 0x2, 0x73a6, 0x0, 0x21dc, 0xff, 0x5b553ca9, 0x4, 0xffff12dd, 0xddf7, 0x303, 0x7ff, 0x1, 0x7ff, 0x1, 0xffffffff, 0xcc, 0x0, 0x6, 0x8000, 0x0, 0x6, 0x3, 0x7, 0x6, 0x80, 0x6, 0x7ff, 0xfff, 0x5, 0x80000000, 0x4a], [0x7f, 0x1, 0xffff, 0x0, 0x4, 0x9, 0x9, 0x2, 0x10000, 0x1, 0x8001, 0x200, 0x9b, 0x4, 0x0, 0x4, 0x5, 0x59d, 0x4, 0x883, 0x3f, 0xc6ef, 0x3, 0x4, 0x8, 0x20, 0x82000000, 0x6, 0x6, 0x7f, 0x0, 0x2, 0x6, 0x7, 0x2, 0x8, 0xfffffff9, 0x6, 0x2, 0x3, 0xfe97, 0x1, 0x1, 0x6fc8, 0x6716, 0x5, 0x3, 0x7fffffff, 0x5, 0x7, 0xff, 0x758, 0x8, 0x1, 0x8000, 0x40, 0x7, 0x3, 0x8, 0x0, 0x2, 0x101, 0x80, 0xe99], 0x41, ['/dev/fb0\x00', '+#*/%(/[\\\x00', '/dev/fb0\x00', '\x00', 'mountinfo\x00', ']&&!^^-}%\\@\\):\xe8%\x00', '/dev/fb0\x00']}, ["", "", "", "", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x8001}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004105) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r6, 0x9, 0x1, r8}, 0x14) dup2(r1, r0) prctl$PR_GET_FP_MODE(0x2e) 00:09:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) 00:09:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8990, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8992, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:48 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x40000000, &(0x7f0000001140)=""/4090) 00:09:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:48 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) write$rfkill(r3, &(0x7f00000000c0)={0x4, 0x4, 0x1, 0x1, 0x1}, 0x8) dup2(r1, r0) 00:09:48 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x200ff00, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 00:09:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8994, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xf, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8995, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xc0, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xec0, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) r1 = gettid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x6, 0x1, 0x7, 0x2}}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = getpgid(0x0) rt_tgsigqueueinfo(r4, r1, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x5) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) 00:09:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x33fe0, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:49 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2842, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x4}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 00:09:49 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) openat$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', 0x10802, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @loopback}, &(0x7f0000000500)=0x12) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000004c0)=0x5, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xec, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0xcf}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20044000}, 0x20008080) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000380)={0x7, "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"}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) 00:09:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3fffff, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20000090, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7ffff000, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)='/dev/fb0\x00', 0x9, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r4, r3) 00:09:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xfffffdef, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x3, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:49 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000feb000/0x13000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00000000c0)="0e3cb8e100ab8adc2476cfd3e5ddcca4fc3a0a64e249bd007b3a2ff45809a863679e36b1a86ecfb5eb6e9e3af6eaeb030f03f7a28ea9a3b1409622e5d483f532b99894d63e6df937977ba7f1033fff5b92d5d29151b04b6345a5c955439872459adfb130a17db4e9ff5fd769ada46d8c9ef4147bc1104b6d084ae2c0", 0x7c, r1}, 0x64) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2681.966489][T15543] __nla_validate_parse: 5 callbacks suppressed [ 2681.966500][T15543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2682.107091][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) 00:09:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x8, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x20400, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000001c0)) r4 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x578, 0x384, 0x1238, 0x3, 0xf, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) dup2(r1, r0) 00:09:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xae01, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0xb, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:50 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r3, 0x0, 0x800000080004105) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r8, r9, 0x0, 0x800000080004105) write$cgroup_type(r9, &(0x7f0000000080)='threaded\x00', 0x9) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xae41, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x10, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xae60, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:50 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0x22, 0x6, 0xffffffff) ioctl$int_out(r1, 0x0, &(0x7f00000000c0)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x4a0d2, r4, 0x7fff) dup2(r2, r0) 00:09:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x14, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) 00:09:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x5, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xae80, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:51 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = semget$private(0x0, 0x2, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2, r3}, 0xc) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r4, r5}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r6, r7}, 0xc) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r7) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, r3, r6, r7, 0x1ac, 0x1fc}, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, {0xffffffff}, {0x0, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x200}) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80, 0x40000) dup2(r1, r0) 00:09:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x400454ca, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x8, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0xb, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:51 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x105300, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000240)={'veth0_macvtap\x00', {0x2a, 0x2, 0x2}}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000400)={r4, 0x3f, 0x1, "5736e228a7ae3879668980dbedff6e8990eaf14e0f2dac6c021d41a18c4871d5fad2215fea3dae3459df20b0db7c1fcc650c9d03e91ab30405da9bb09590059a4ee9953a3d7b336f75bfc5890ce712948c33dd3a5f2b84ff4a874acec5c49e231394312fed1a0af0900a"}) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000140)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqsrc(r5, 0x0, 0x0, &(0x7f0000000280)={@initdev, @loopback, @multicast1}, &(0x7f00000002c0)=0xc) 00:09:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x10, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4008ae89, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xa, @loopback}, 0x1c) 00:09:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x14, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:52 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r3, r4}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x7, {0x5, 0x7, 0x0, {0x4, 0x3335, 0x2, 0x0, 0x5b16, 0x401, 0xfffffeff, 0x35e2c0, 0xfffffffe, 0x4, 0x1, r3, r8, 0x4, 0x2}}}, 0x78) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/140, &(0x7f00000001c0)=0x8c) dup2(r1, r0) 00:09:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4008ae9c, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40186366, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x1a, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2684.480630][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4020ae46, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x8, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40284504, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2684.896725][T15636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:09:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x48, @loopback}, 0x1c) 00:09:53 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x7a01, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400200025000a0000000000000000000000000000000000ffffac1e000100000000200052b241a7000000000000fe8000000000000000000000000000bb000000008e15b058437bd1dff662977e2ae51a28a4bd55d8030c3fb4148d853550ecd1f94696fbfd6743af1e7311f4ca8fc01f58e02461f142922d18293b4debac1997d6771206bb"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x490, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xf4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa8fd}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb625}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1354}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff57f1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @private0, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x97f1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b4e}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @private0={0xfc, 0x0, [], 0x1}, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1005}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "bcd4d52a2118926a0a25008ae104baee8c8b5415a0f53ce5c4929546800754534937aa7e00112a267e40b85c737cfd35d773731a3d692a9cfbaba18aad8f9b49f02cc6838695df1f8fda97bcf7c5a245613acc06b1a4a1d4752842e25a3babe704a2eff4519bdb7afa8a12757cf6671c38e674999076418209a40caeab302ced05d3e3592dbd95726dfd00fe01af94255dff0e2897cb6e8bd5055058fd50a5874d1d1a9e379685e6df01f202388562eaeed11d68b4f79722680d04fecd762fa90a8421020238c5bc4b3676b1296372"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3d3e0f5d}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x40005}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0xb, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x402c5828, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:53 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x391000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f0000000100)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:09:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x402c5829, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x10, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2685.468545][T15670] tipc: Invalid UDP bearer configuration [ 2685.468570][T15670] tipc: Enabling of bearer rejected, failed to enable media 00:09:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x28, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x402c582a, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3c, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x402c582b, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x402c5839, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x4c, @loopback}, 0x1c) 00:09:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4090ae82, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:54 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r1) socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048040}, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x81}, &(0x7f0000000100)=0x8) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) 00:09:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x2, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4400ae8f, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x3, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x4, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x810c5701, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x5, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x9, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x68, @loopback}, 0x1c) 00:09:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xa, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:55 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0/../file0\x00', 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@acquire={0x15c, 0x17, 0x400, 0x70bd25, 0x25dfdbfe, {{@in6=@local, 0x4d3, 0x33}, @in6=@dev={0xfe, 0x80, [], 0xb}, {@in=@empty, @in6=@mcast2, 0x4e23, 0x3d, 0x4e20, 0x7, 0xa, 0x20, 0xa0, 0x2f, r5, r7}, {{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x4e21, 0x0, 0x4e23, 0x8, 0xa, 0x140, 0x80, 0x3a}, {0x9, 0xbdff, 0x7ff, 0x1, 0x20000000000, 0x9, 0xc6a, 0x80000000}, {0x800, 0x80, 0x4, 0x7}, 0x2, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}, 0x73e, 0x3, 0x7, 0x70bd29}, [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x2}}]}, 0x15c}}, 0x20000041) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) 00:09:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2687.455404][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:09:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0105512, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x300, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x42d, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2687.854196][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:09:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x6c, @loopback}, 0x1c) 00:09:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0287c02, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x500, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:56 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000001280)='/dev/nvram\x00', 0x501000, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000001440)='/dev/video1\x00', 0x2, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000001500)='/dev/dmmidi#\x00', 0x2, 0x182100) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0xf, 0x80000, 0x400) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004105) io_submit(0x0, 0x5, &(0x7f00000026c0)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x8000, 0xffffffffffffffff, &(0x7f0000000280)="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", 0x1000, 0x80000000, 0x0, 0x1, r1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001300)="8ea11eda76c4376797a61e5e57532de03a570eb130c2453a1fa396784371fe0ee62a0e674ba7f77dff67f7925247e231e48a6f7002b9c583cb3156ac86e287362dbaef512f94a3670baa39ec6f802f932410e9602cc6b26b161ba45e61bf49a72617f8b16c3aadd1cad8247f1bc72b9e8e3087b9037ef8734085c8d0cd0f545678f03dd0cf562b916673bc7bc11b9c25b77f0cfbb4c61a52e056a372153f3b07bcdb680ea7691d671028fb00b3f64547de8ef0867bd804f82321df4af4b91658fa4ba435f47563d8fe", 0xc9, 0x6}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f0000001480)="b364d07b09d7bc7d3892800065618d823b9c6adba42da7a2076376b0a1db1ad263e8cecef585d18c547467d880615ed84950e1876944", 0x36, 0x0, 0x0, 0x4}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000001540)="40acba3063d1b92db6089bdb06160436fc6280bd04f9a82985cb4586e545ad873fe9db2c9098f8d7518ee26f6652c8b0a52b9f928dbdc28807a79701b656b2193ea3d3f5010e3d4d3d1a060bdc3b5c1e7955939585832b9d52945f240dc5e6157b6cc644b7791961a22bf57d269c5faacf6dc7b56d8abac60aa515aa3b0151bfbf621e5cbfe92cbb54cab4e55584d39227b7cb564784c4ef01fb6fdba5d0b0a0e1bd1bcd1a44550346a980f0bd503468aadcf75a271fea8f5e3c532db83b820cdd67934c3e0721d945ac990ca1fce83a2d78ca37989e5eaa111a", 0xda, 0x9, 0x0, 0x1, r0}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x6, 0x4, r4, &(0x7f0000001680)="d5e2d5b94384ee4874e9f62d45fdb7c327eaa2cb5a6c98d065ce8557b432eaf809402eef194861d7f177592f4a22b2ada96b6a7eb893499403169f60bd18714af1091dd05fa812bf79d3b9a0036c69ec341a2c21ec02b69e7a910c2206e47320798f696dd438f9603b5904e58597947eb3dd9e166c036e1baf2f5085231fc2324573c5742c7a3968e7163a9b0548bf1501caedd50c30919f5911c8aac297a9fa22aed22769b1f7cb179e25dfc6ef648441ae17466f38b9e3a146db58f1a9a24ceb3ad1d003f8a54d3c81626ad3433396e44cf53132785cdc62ea7824fa11b5ce3bac5e2d6461d97e7860768c1f826a0361a69d1f73715373c0cc3c10539aa55fae983a551c376bd10adb96bb38f02db3950ab6a036c1bcec91219264e0d26b2c846c6a90aaf8cd5fe6351a7a2d1409b50b290fcfe72c748d719370a4832d8769fb1b1132fa09a57108d4b7ac8ad2450b46eaaad0047699644d4d4ce18c58e241cf6cfe171ffd928b26784ec9f702b27c18daae1e5d765cf95655f1740a2ababbfb3fca0c690d71321a486a87d643bc48fa5b734fccd8a52b561ac770a81cc315da7eebecda296fe4282d2be52df2a52d664e96452f401e1f0762e344e012c4dc55b667744d48ab760be855f0cc619f085764d4aaa9502b2710e15276f584e661eb6fc981511c82d70abb29b16d2c8361f3045e517fe8aa40a74787ebeb34d9d55796904df34c2f737b3bbb2b8716222ae8eb381d28e30327f97ef7f54d8aad15662e0b4bd504a50857679d0c6c9fbca1e049168f5a06ddf814a08ed945402fef070d2121390b45d4c2331ab5d72944a772271552eddaf11641fe7b4ed1f1721aed1ba3ee54f3bf0d4e437b92de431b0a2c72375883b7cdf85aaccf03fce2fbbcbc47cac767bf4d4d71af843c96bcd7632766be82a0b3a17548baa8289f478dad51172bd2f8df971ffe0fbbcbdc1109f83007a0d7ef90c8ea75354f32c9a1131ebcd0bc6b7e28a159780b4869db759177b9f3ccd478bb635ba55c6e790f8e93e47c1dd80124e3b8123d4b7d58beb59ae82bd844d5b1e2bcdce9d266ec481626a50fc62bc80277b4c2dfcd264edb4fb81b846edcff86ad30d1ba5694add42a620d65babb3b15cd3140a95ce9ca38812192615b5f3dc332e108f2cf8b981d216ef74d3f767bf0348556588b2cae5caf449196a52d94928c7e05a1ff436e4f7c88f340ac7c328a59abfbf1d8b9b33fffa40824a3bcdab010e0502fe0a85c644970a0769603e1515017b42e7527fc17059806e6cc16b1f3db4dbee1e15408691e26d37e3899b88b4524aa4a006732fbe453d498fce830499143e46c4bf04723bf52d9642e1ebfd4821cee62c4ff47347c1d2bf96bef1ae1da21f7af6a7f529396308db7840036e1eaee7ea310e344bcccd68e3fef6ca4d9ca0f0e2d05bb257582ca756716c41fff21c6e50915b794dfee438df4a60c5a092097bb25c31106609f2b0ed1ebe32a4832233cba0f46600e7433ba713a64658c40f44122fcd2de4f1fe30c012bddb159460aebc31c81f8c5a18262fcac90f6649a742d9de07718e236849b2726f221e1c200f9415d2aca8471a771de78caa4168d81a57ae8cd073eec140a362fef92de561837b8cced14fc21eb50e98c255ee82f482b54bc4f6c3d47f59f1407ed50bc39b00ff2fb962b31aec698fb948b86927d5b66a8c54f39246dfe41f03ceb3c24089f9228e7ddcf8b3fc97e4c9c87a277a27a779b31c7fb293039da73c33356da2e2892a634a6150f6bf957f37606a0e9835f37394b39838c4a7a28a56bc2648471e90d1de8d097377e7bfb7c07eeb4afc70b3c1a59478135f20c005db1118a82aa7a10c66d2ced7bf216e5029ebf5ce5ac8dc998288856efa259afd74a3c89494453328d9f559193e9080ee446008f931623f3be2a08ca0feb4792282774936e185d53fac42f52679a52090a042679cf1194ba50d50afff5e77f0d2c9ab4e07247ce2a0163b306895f7f7666966db2c4c05e0b0744650b356a183990600716926d85a1b7816aab1b81d98b44429c7fdc3a3e510f356ae6a8baa2064477c615df3e794c3e62798e38c87623e5ac169b4d0459ce73d0434219fbe03f154f7dd8f28e56a8ecc22edf01c1361fa68a74263227ed0974fb3c1033363f78908c2e92e50d2daa37a07e3468e01e12258d9c0bf5c75656590e2ff4578957df299ac7c236ccb66e0019a07cfd531e056b4dcbf264a4a1297a45bfc083ac7fce6902d4a146d32a30da7c6d4522c631999e43ef15545853813748c5ca145e5e7025a965ffb05afb2c0975bee7b853793b3834827db406d382160bcb90f193a923f4ee2e6eabf34d4eca9736197428a2f147910040216689f027d44203266c6c80a14347c7f9ceac2227893d2aadb8cc15e520576bb1069b23822f994de2a01d00b137647d41dc3480ae3900ef58502c817f0f1cdca260e4f3350c69b77b4dd3ad53d43ef5f1663b129b61e43f64044cc9cc3bad65073bbaab653b2e6b26f6604b2793da3160e237e0050b266ebff9ce3a0c1b13c1104174d57086d9a3a267210e4f11cac014955a7e3e37ddbb332008a37cb13c3f64b04351a0c814c9ad372d91c99ea3a5218d37485d215bcf2c7d04724470a3be24a60b647c1300f98f9cefd60560a773873d66716907e0fc488f59db77145d15c7bc96158651f7f3dac554d7ed49be05272e169aef43f946820878abc2b44a141a38bce67653ed25bccdd7793c831a4985749816907c66d6ec2e7b51c7a1d2dbdd1dc26a4c30534c16f44af53d5ab4c6840e5a95e7b18101e734a92805d7b0338ed5978555b939f6d6d85d581c33ef8f24708be557e912f217fac33943c08703b550714356006c1aaa7d3ddc2ad45140d38ddd722dd0e74aedff81a48ec313b76c9f3446156ff1cf29620013b2d330f300898eb338e915126b188a06bb65ac18c46e63cd4e8179f6b613601ef3f98a2fcebb592f14cea7168be356d41b3dc5d6cd0f96ab439a328f056bf594ff730289cb51504204fb4768d9aeaf1464a16c9d3add94c08099fb3786a06f83763fd694e17d2a962f26cdf547f8cbc024b83c23aac95891e0af037df301d7e1ae965691e845699663e39810ebed6775bc2b996ea2d9f5d05e55467a354b9ea1fa2ca18335d84acbe00b180ca08f308229bfd768cc579171a1b241739491589e1633465b26dc24611c8bd3ae1e79c9a4e91c7310f5ad61b3ba9aec385f837b657d8b8781d1627399cc932a19d2779222fd823f02466fb05fa1c61dcaeb0a0033dbf2405594a01fe380165e4a1f55e37f22cfb0d353e47cc4bfa2a0905f3fc6dddbfa5b9e7e0080fe2e33c1defb03dd2c59a15f926b8866bf6b433ace0ceb2f7e68f66f26b804ef9cb66a09f189d4a502b0123512ca4027c0c9dd9eeacffbbdfe252e618033955cd2f75d542f588f44eb35b37e3b4524cfcb5e44f07b2c7489945ec75e5eb0e111b6b23c7e30faf7741c5151547a38f3a9e5aa63dd28addbc46cd6649e20ac094a5fd83f528f0a8e2716b558416840cbeed01cd7fff2d1f4661dcce7c5ff97e3f280b49bf9c37c0d3d1a5361486094e3c39bb50ab18f7bf5f205280466f9858ec3f12f2070d967dad442065067649e93ccc0c91fe0400e1d6ccf7cb148c310a104971123c705fe9432050b8c26cf2a2b26749dba0c35227daeffb3125ed544dfcad4add294b78a2379099d62fd11eef043d6ff9b4d6c5b38df0800aae1331f49fa9390538d28cd8e90bd417baddbc5ed4a050ca83a32538ae858d6e006359b59f35fa9def00a035a027964d24726ef9662aa5371540a43b8ad37e5bfe24cf79e54e39a065a7b5e8349a5d2249d2c6d478d5551e5cc849bf08c748f54db20cc8936ade1f1cbb7d75cef280d4202d9fe40c9cbf8d376d92f79129d568bed23e56b621ef6eacc46ea9db48ad6080a6fc9ef74d230b818ecc553eeecb0a9f230a6fd79267e4d1a9d7de36bae31c27308d27b5e2247769ba525067bcf6fa8d49c3de85eaccbe22c80d03e9f968f5419151ba112a64a52965c975633493951e84cac4f8d420070682baeec22971b27225382a692846e9a0bf33a0588f69525e3ce736289106a2ab51fe3ed5bdd8a40ac28a2cfa99c5aad1e7832cec16cb082d0417ce4d1cb1c6af25a87370a0b2787b45a19181db2024a6e4f49c937dd73bf70c5276f9590dd154f4f0d20e406d945514ed55e5ec026d4d466678e01b19b414a56315ce343c05ad7555841f23c87c567a560f449ff8b7fdc9bb2955b15576fc3356e5a12c0294c03ce6874654750d4c73247b436c162e765f9bb743113523567ba51dba6270eaee913e4396f403e05242b244fe323895c76c778414f4113cfe31f121dda36619a05a5344c1d3028b11115682cb87b84cad4fd75365c6c7d5454b1f80e22c74143161269d47187ab81b27c2f6fea424cb100e420a0f24a9c8220a7e24697c2a4de7373ce0e478f47fc8a82623f22532f4a6ac33d50bcd88ed304bdc9a767babf22b31c0d65d3ccf8d652fb6da2586e8528a015d73536bd1d855cf839e3edcb849601f973c2d3d53f70d05fb66a46952b2b82aa88ed29e5b1ba787097d0f2ee14b4fca2f4f84c432d491c10447b62efecfa8c2be04099c91c8dfa03ff5354f3de7b89dff5b50ebfe79e96b2ccd00566317d57468615ab4a063321bed19b98d0c7bc63c47c04190438f061d401de30f70cda32840370adff951926f1b45afdc41555134e24676a5d8315a9e160dbe8d30ad873351f46e973bc15d4f680cb4aaf655010be9b2ac1337588c41da06de052805a2fdb6558c021319eb1587aa9956990674e7dc78c4f230d0f8af3234169df394084997949deb6371c99c76ac1eced355ccb3b02dce64c2da8e8205fdc4eb10d557e4a7341af0d1de022ff4afae558dfed534f01f9cd52e53fd9de9fcc685b658f8a3cfefbb968fa233f44c1407bb1bfe04a6697e4cab3265de31b40406c4c9c322d2f70b664fcc6fe8a98f416477e5adf541462ea4bc150d1e7141b1c06563e4dcbd3a92d92817f5864bd226161e37c80cd65676b1c848f5781f71d2f5cbfa59c23ca527eb6b54583469331e522f051e4308bc6f6ac34c4fcbf87e5fd5a8944f2f0c6e37f7dc2cc474a173c739b111f0da6dbaa848d3a4883471babb78cac97ca4acc32cd3d1368dc4315f84795ef01696d1415d599fe2755c9d5a85ecd1ec5072ec6be16cd63f3f02f9d10fd77ca793fe5b8e5977a0667483102f3233c70b70a5a41725f4964a18159e12e81a48ff42368e81ee4c85a8ed05d526e353d3209dfd174f0f34469d406e7bb25368f0d3ad902594b458b016584a5a183e394abfc2aa487b654bc59862a1badc3a7fb2c6f4f4f3b9544835dd319f9f83b4c84cca7fbf42b4999a86847acca21f808e78bed40463f957c02d2f150b81b2869f78c0efe2a56539051cd3f08c819c70f1e7074a13e18c29fc1e3fe62938b0e93d50eeade0f11cb60bfc9c2bfffbedb39f13805ced2e67bf13f656163f917e841dacd8f77542df155cf946d6a4219b744875469fa8ec6d04cd17603cab045f4293ea2ca34ee7184c3d52e174d477d30a622e374d955522e297451799cd28f78f9d082a3ed7505ffcf0b361b3b3fb1cd3ed3a1c1c8c9f56b3392beed659ffa4f0fd424e924ffcd40df06f9f83f28d8fc039ecd99585c9800401751785ff90afd8e16c84dbe727ca229fcc21dff4c106370d1c907c765a6649da0e9026f4b7a8911580881ee9ac27c4451a1", 0x1000, 0x2c2, 0x0, 0x0, r8}]) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_dccp_int(r9, 0x21, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:56 executing program 3: clone(0x1018a00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000000)={0xccb0, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40086439, &(0x7f0000000040)={0x10000, r7}) 00:09:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc4c85512, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x900, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2688.285063][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xa00, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2688.376270][T15765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:09:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf00, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x2d04, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2688.732624][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2689.083060][T15765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:09:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x74, @loopback}, 0x1c) 00:09:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000100)=0x100) openat$vcsu(0xffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x404202, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x1d8) 00:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000002180)) clone(0x200802245fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002140)=@req={0x20, &(0x7f0000001100)={'team_slave_1\x00', @ifru_settings={0x5, 0x323, @fr_pvc=&(0x7f00000010c0)={0x8}}}}) r3 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x4b33, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000140)={0x14, r5, 0x709}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01464ba, &(0x7f0000000100)={0x0, 0x94, 0x7, 0xbbbbbbbb}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_SYNPROXY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x40084) pause() ptrace(0x10, r3) ptrace$getregs(0x3, r3, 0x0, &(0x7f0000001140)=""/4090) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={@none, 0x3, 0x3, 0x0, 0x0, 0x81, "54017cf5d63da59557b8c808d59b6804e791dec8828deb8bb0c5f14508b20f043061d375e5a0117dee5ceef4139c1bf33a04ecf29fd61fbe2d05bd84bd61d35f22f1c0a11574981a5ee985791ff8009249a5dff167cdd249c65b61661c8e7d34a06b52cb978d93377c879532e2328edee81d4a72489a8ea24936d1a9d7dd546d"}) 00:09:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x34000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x400300, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf0ffff, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x1000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x7a, @loopback}, 0x1c) 00:09:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x2000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001140)={0x2, [0x0, 0x0]}, &(0x7f0000001180)=0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001340), &(0x7f0000001380)=0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000013c0)={r6, 0x0, 0x30, 0x2, 0x1}, &(0x7f0000001400)=0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f00000000c0)=@in={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000200)="aee8ad8729b9a0c0253b742e450b85ba92e47e7ee30571f9120e4aa995d332462685c6838e4cdb1a3e1a77199062e5acdc08db61aae38b74b5ea5c3692c16895d2326cb37d362804c77233cb06ac37d157fb7032372974a0ca1fd41d24606cece4e7b61343e1857c4220be830d9d91070d6439898c7ede81c82c2e44ce077e2cd07961ea1455d2e8d3cf33076c9022c4b9195e8233400048c8450ea9e2b0238eac34d416684350d2bfbad45a780543dbf594677765a95b3c965ede0486b5c4547c705b5b0dd669ecd19be37cc3bb201b3c1d593fc2360f5affb35df42c35", 0xde}, {&(0x7f0000000100)="f3e965c6ede3560fb8cc91a9b41370acea61e29f44a4bb", 0x17}, {&(0x7f0000000300)="e4334d1cb95e2b50891904662582f3c0dd7d20c759690fef92f18089147cdcf36184779bd0706725b232db0b8587ca9429690f7f1b891789dad5c82c6d3efaa84a493fd7cf32da0d5eb47628d90fda6e2e16387d0fdfdda360299a8a66e734fce2bade45b2c1e2a8d6226c433047a2141a1dc88e42abd06ddc36d6d5a6685c318a227f0d68cec82bb9f44ef328a78ac1d4c625604fbf21", 0x97}, {&(0x7f0000000140)='\a', 0x1}, {&(0x7f00000003c0)="9489ab591f305d0f80df9de9e12fb85d1d96f1c9a00c598f56a234f7c5b4a6d75bc85b7d8d71525582081bd754f1c2ee4f3468df912b202bbd0b37dafcd2f06bc0ca2b1c5f6e8069657585894552e8395b473e5c7a8c471870c2dce9398aa4dbbfe6a617e4093f661375dbf74b33dc38ef341b31ae4025b592769a2438d5cfe92ba3d1798ba0c0918b8dcad4fcbd5e3d236ec1b589f24ffdcc4b647204a1274c936e35556be90587760ad98c1884882741bdc7f966fcfdf954247b22bf9f3d3d183d6ef20c162bf78d65cc1ac95ab0a15b6241ee4398d8963f61", 0xda}, {&(0x7f00000004c0)="65553f924ca9ee500fb5c77154fb2912f014c1e075c1ec072ce971aa29d59c7fc2a91204c054962ebb32822bd4f864290c54f50e0600000000000000b316c75e81fad7313aba52368cc340466ae5157c41f6c695dfd6f80f947fb68e0b9599b5d5baef1c93026f5ebdfc998ca8208cace4a6bf9ec836bb3f23289ac7e8a9c58a8d1a2d47052aef7f09397bec872a20390c495eaf", 0x94}, {&(0x7f0000000580)="5bbfffd4ce8adb845388ca3b16f4bad1f603bd9610ed83718e24a66acda7678d99a6dddeeacb4f00e357bd129a179af618410a43e6311252565ab1e0182518ea69db95f0e959aa1d31d3a97bbf25f11416205a284add3e8049e52130fef5bb8fb966843be720564ca3ded68c94bce7b989140840bcf29367e719ed20d3bbb6b86e6c98cc514c2ac4557f2e0e6a2abf01c4d65ec47e08de4cc559d2838133d78d133e9a10258cfe92ef8ff388", 0xac}, {&(0x7f0000000e00)="6d9d43b26a0156d5820a8eaa52f8000000000000000000000000000000003b9fc22726f17b6ae114b720b071", 0x2c}], 0x8, 0x0, 0x0, 0x4}, {&(0x7f0000000680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000006c0)="42ea37c338cecafbd899901d207ef0d4dfe3a5270b96eb1dad1481dde9612f761576196f7fd44bfd162e7ba148c87f447f906734f8c4c6fc1910435470549452cb90195ad97315835f5a7a06c31a4bdcfb3670c6be3cfcf3a842a965c551f6510e0c99afdb579f543bd5ec9ee502765518cf4cd4cf6f46307af710c8b1f4530a021bfafa567270acd912d48b216598090e65818e091022a274f40fd62ad84248dda770cb312425fdc1d0b3e8fa2b9eeb0296eac1ef25e3a43e362775f1a7c8ed9f304eeb33df620576daf2cb8d3269e860cd5be9953aa9919540a916aa4cb2acffe48bc8ba0c0982f0e80e71b8e580a636f0820505", 0xf5}], 0x1}, {&(0x7f0000000800)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000002bc0)="1c727e8b0456ec19dffa0336fb32caa679a4fe03a5809d64a38d69570f3cf18a5379535f1a31a2b4e27cd4537fc1f4634497917471a0b0d1fc8e37d483c72a536fb112ed036874666c54872dc7a4bd4a96b1153f3618c11642abf7a177780d34034dd8", 0x63}, {&(0x7f0000000880)="05300492ac72ee3209fab0bb24c2d47564ea3e2e2f6bb4", 0x17}], 0x2, &(0x7f0000002980)=[@sndrcv={0x2c, 0x84, 0x1, {0x7, 0x0, 0x200, 0x3, 0x6, 0x100, 0x8001, 0x3ff}}, @prinfo={0x14, 0x84, 0x5, {0x10, 0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x6, 0x8, 0x9, 0xebfa, 0x7fffffff, 0x82, 0x200, 0x3}}], 0x6c, 0xc981}, {&(0x7f0000000980)=@in6={0xa, 0x4e20, 0x9e, @loopback, 0x4}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000009c0)="24f4041fea9670dbca0d8f5072bee4bb9898475868e7c34cbb37f2a5f64967fa58e4ccc283096940168b61513bc6b74571e55a006e819978c1c7277e63ec727168e7ad0741995721baf31fc2b29ab81d0f3ba6d829a9d0462e0af05535505704c5e3516d8e0d621ba8f79535b1b230d7e60c4ffa402bb56576ecf0494f2cc894c6b99c88c740ae723d3af315aeaafc4101be0c4ae3", 0x95}, {&(0x7f0000000a80)="23480c88de319e8a8c9ea4efca4d24c73d92fff1fbad0462b1c591a3e52b6f7c4131a4f9c6fa7487b850c03a321caf9e29c38ce73e8d8a148dfd29db954cd3316efdb161940d4b7f02ca044927eace365b18c7ccf18f1d6dad8347b42aa47736bd28bcfd98bd00b6f8d0524475c164334782e72e6a8a464f8e6355fc436663f8a90cb2ca4423578d742a54b598d7624386234d1de8947a98355df04b4da30062e76cc419ed0c338fa9b3428bc9a4b1df66ddeddbf700dfa7336f0e97d2449366ab899484ab140d13502e536733", 0xcd}], 0x2, &(0x7f0000000bc0)=[@init={0x14, 0x84, 0x0, {0x4, 0x8001, 0x2, 0x2}}, @init={0x14, 0x84, 0x0, {0x7fff, 0x9, 0x101}}, @sndinfo={0x1c, 0x84, 0x2, {0x8, 0x200, 0x3, 0x8}}], 0x44}, {&(0x7f0000000c40)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c80)="d90131c8b69d14d3436653741ea62bdcacee824cb387dce002", 0x19}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="b21a4aedf104d98eb987a2a1a5bb191f3857a801a24c24e39bfe4d64529d1ef836093023aff733d73094bb1b8e", 0x2d}, {&(0x7f0000000d40)="4cf00fa24e3ec7cbdaa04f159b5f8bf28f5d21c87f2df882487ecf17", 0x1c}, {&(0x7f0000000d80)="1c98a3c135c7bdf91a0b00b4b6aa6c4af9a37bec186c3919aa9a3590cd947b918f2b7b08c5f4dd89756a34c36eb4b4529dc49532ba5c09c26399a5df0b420a1e14e8f7", 0x43}, {&(0x7f0000001080)="597e25c1928907a5e19f5c68381929d976cd6714037f8107000000a0", 0x1c}, {&(0x7f0000000e40)="48d400f48f55a8b5e05d18e5b6ab740f1088601e8128bcfff8f5dc5ff2e57a03bf7e6f0bedc76b5b45421f9537b23bc87f6e1ceaafff8f6e8cc971b9bcfe8802d7dbfc5a83ba560e253d6a7f26a8972c4c134764126a941e9545b638f00596a41b9269b2d19c19b96a7381cb5cf9c2ac07e77cbcf3cbfd5fdb1eca0e4b55acfe4f92357a90afcac5f8d2290acad91b86c695e945ddcba18a81883e1e210188d0ba1899f74f4ae8c97ac4fefcb55c6920c3fdd70048bd5783ae8fc80d8f380af91db347fdf808d87817ff31c44207af4179975f8489d8f80ac1c359d8d92bdf4f486e474e889901eb8d51c8e21b2ddc10f5696849ab5d473040814072deb4aa", 0xff}, {&(0x7f0000000f40)="0c5c13f3f63ec33c8006f787559151eb9529c79533e9d2b486c0304d2acc9fce8a07e7030a4492091ea73957f3d12e0ea226ea39a6c81bded8585bc383798ca7f79f6b899e645a211f76b89e8db386abdda17f0b6a51e60d42c3d500a3d8728f1b55992272816cfc001e9935ac8e488313eafc458c60ac58bbd97ea20afc1eb015acac47d6f89860e1f6d685720298f82e937bdb5efeded1d35ad28176305a09fb3cb9fb71cd672e76c16ad58865b0bca9fbb30c66167b940febeeb935f8d94ba078a603d6", 0xc5}, {&(0x7f0000001040)="38cab0dc5ded", 0x6}, {&(0x7f0000001080)}, {&(0x7f0000001440)="3d0dc10c9a9f6d7971b5be3c1372106a71094db8220637d54f16eab51602fde49a8b8f020fb4acaaefcc28052cc5b9d53f7b21c33b7783955086c3e5eddf792f9d1669ff651b6ecb35b0db910a76684c8894fc0a52c877c80736dea68becdc7af9a61e958a85dc59f2b75c6945b4262312ed1c0250199efccfb02d459a856a0eec1cf1bac8b148dc0243f843c6fc3ad4d5dd68f0983c672d78f3be356be32ab2b8008449351d03bb2e0179e05cef3dc88bd33600b0fc8deaf22926afda62d74b465491933c4b0d3f16f59eb0609ce5e1ef11d6119b17", 0xd6}], 0xb, &(0x7f0000000cc0)=[@prinfo={0x14, 0x84, 0x5, {0x30, 0x2}}], 0x14}, {&(0x7f0000001200)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000001240)="84fcc5adf3cad8921b885df5f7f9af915a6ad8d29bee3edde03917cc21a9a13be7c1fe8994db70856e744d563ca3051c93b2942db09fc94b47c0d8643857e5b519c265bd58e2e9026d07f6f37c191e535292914c4bc083d3be6658a1ca291ba21f4f52b92b733b8652874ab03404257b4353436644fd493ca1bc4f3efe205e5378abaca9b2dbf63cf35ff9ae32d43a4da3b0dbab52d60800", 0x98}], 0x1, &(0x7f0000002a00)=ANY=[@ANYBLOB="14000000840000000500000020000000060000001c0000008400000008000000fe880000000000000000000000000001100000008400000006000000f8ff00001400000084000000000000002200a7ab080020001c00000084000000020000000800090207000000ffffff7f", @ANYRES32=r2, @ANYBLOB="140000008400000000040000000000000000f8ff2c0000008400000000000000800000080000000100008000000000ba0c00000000000010be443cf4b83611bc67515fe6a5d607b1f460d0411b8cb8313b493e3465948959e8fe4ea02ae6e3cf63bcd09201f978457f10d834240c40abd7db31553cb5639052ac897cba04bea2c49f0a12e32308cd42449487c244c093db567b6faea547e8fe88dce69619b3cb90f454fb5c782e75bb78ccc946b53065fe5dd884bc0970885b7560d3dfd2896ae783d2484390a8e3bfdf121ec490a52de0e842b865ca9b9db2945f37521a513f7978604c3d93a65988daf9db00d1fb01534b459cfd7d29", @ANYRES16, @ANYBLOB="100000008400000007000000e000000210000000840000000600000001f00000"], 0xd0, 0x10}, {&(0x7f0000001540)=@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000001580)="564ff954eb8f39c415e046fcc7cc3c632901863653d6617b1aee5c50f9b695958be69b5e01dbb8602eebfe56c27b5189df54646668e829fc4ff7be74de59dad1bdc144ac8b175c85add9c5841f4d26ac4eacb57a6ef9eba04e2fc9d7a8da53966e67c1d91bbb46e365068b105ca848d336d169625bef7c0fdff294f31b4fa52c8c4d1e497400476a5d6286f8e114f22f", 0x90}, {&(0x7f0000001640)="49c6d7107edc93c7524d67b791ac7636029b174fec59a8a3b4b1a89299950c4e322b377820f19a5438bb7df3d7780363bf288e4c050ee4b547a269e09bbfff26420c53f4eb3a0361248b96a93014b8d9952f091984cf9290e3075447aafd64f2501859a4806b01fb4d247a091c9a16bfc125601a73eb7281c38c58947ea1f0041277be1739704fcbaede4d2f07c658a67ea327bf5ef824aad6a40a26e257efd4ce1830f70028ae3cdb240e32896e83933b55ade6e64da68b597768cb2d823882c02d9a2853435490b6c0a70e9aee365ba9f94bb2106de5bbdcbcdfc8d8a99f26d7a5312c5aa0467a8ac0bca3181f70817a7661382dc5ed49a6fada529934c7644b75d9b971a1b474c01efd579794434dc5a54bc6d7f875c153109eba7c2406679a2facbafc7bb125a2114cebe7c7c37d1ffe49bde6371a56da3574bad522f99a3e7997d97aad5a411473698091ffb3725d8d1abfe5864301a41d1fb7af8f15d6e436c3fdee0384d2a13157cb146da9e3d9501155b70ea73e6863ebe42013029dcbdd70d63593e15868271518f4bf4c99cb2aab31c502dcfcde6d86e26178afd6c72d8cd645849f1f7b8d5c7fa63c37546856bca2ba148dedaee3058744457b647c10adcca48b8f389cf810f8217d7c8d6d50675e3e3389505783fd0a389b756dae7f5ac7ccfeca36b493517553bf45fd28b25d925a469e9d3c051145826d83d7ea63a05d872484612700d4ac105a7874f063d15e664a6738930e44aaa64449bebbbf91eb1506c24c6a2e643528e3e6df8255768f1f0206c2814b5a1f21b83125d90f7a599cd8cb0e7129dba1462241420e3fc00137dd3453222866992663b4fc38359e989c794e954e0cd5b16425c61772fb86b05696a6398349c3f06020bbdb0e11c832475262e0fae557c25c2377c2c6592a76e5194828fbd108b1d7f4e68fa61f1f966bc86400887417b7f619514506d14710a6d8158327cfd4067d0b2f886dc2fb3d0ebc0fdb1229ed22215b043d8add2a21b7170d52c5f48c8e9a12818f052b67a1cf8dff382fa5b205d19041f310d63fb9bff0a9a0dabfba33cc4393141658aa5ebb098379c14a379ab30600bf2d974986aa2eb0ddd890cb022f48dc39a28b8b24a2badb1ef83a1cde98dda0f2b80771a159fac19e0849f73cdec80abe84b482d02f667c90823dee723e923aab9b3a47a81e892272084c7c74d50e878cb7e8f831a3eb51f5712080fe2e6ab17aa283fb7591113aa2a6edc651d66a8c60471eb6822b08bb494acf35aab7239edad957ceaf6961a93c156e9f2ce556bdb63b5d32a524405a5d9c645299b08a66441cc0df041dafca091ea82cc6470bef367bcace35132baab6b47e9be97326ee09d97e18b34bb5fb773ffd0e0d3624f8d01bfab360b49870757ada0c814ee7ac4dbab05d2da4ab8adea5b687137e816708219cac843e5f10252e363f61700498fc6ad3fb647248f6325dc7d17ce02f6a7dcfda63ed113a674cd5e988ed7fabd64a890aeaca582c0b32a1f645557a0d4a4e7213ce3da0233076325abf4bfb24c53270e246dc17ce03b996948271e0c269240e3b98cfcda3ea4973ddf88cce4e8378ef88475f7c0b23e403b6ca264277296c39336f107b535da4d00a22ef34bd490eb6bdadd58532ca3c95a4ef5762e84977e954b16a88346f1b66f010e54f2698ccf5fb5f6a8258937d8602fe79fd65879e79bb587b7d6b451815f35990eb0d236131027a24ccb9642e00776efb092e02fd1aa2b05f05ae95f65c96bf6b30aee6be2945719879fdc16b46828ce4753577526cd947c9f508ac1253bc6d7d2dd0c66ed968ad535c53e237f4033dbc6ca08c05be651009218124095c4ae9f3d7e56cf45afafb1a051e8c2c41627723ff003bdc76f1abb95857643ad754fb17e6bb015b25b2cd8e2e4ac30b35ec8d8b8e8f38dc8b1b4002e69a48c504ce2f3678e08296bb57c242fe7d81c3d93fdf27d5ab8825037bade91a57291c1f20956303e26ae174aad5c80b3df266eec74701b73e7bcec3388edd3c02c24d7a83172ee99c94e4b231fcd0f4aaa77867e264e6f4d6b350b5ed2d0255d34d059d06002ce3aee029227530e98db80deb06dc4530fa786d6b7fe884a62c8703affe3521261fa809dc55e9511ac1afebab65fcc3a5c1ee64221b5cea95d9d45b5dd0981c3d6fdb7994124cde6478bf12caba7f82b4891c064139a89ec07e070996b58fecb1e35ba96683d7195bbf1df963066a571f17d0b587ef0e5ab0b3759407074ee4c60bab4ef58cd31e4f65e23609f05f6879984ec422f8d1360bee3e6ff142744dfe8f268ca2af8680b24bdccca58cd54a1065e25e52701e45d47d65ca57ac622c5fd3abf6112fed4606162589cb1365760f714e31ddf442e876eb3cb324c0ad1243257d70ecb00915a5ab3fbb59e2fcf5f7f152c1a2204a01c973dff41a55606e3335774ea3d8fc4da90e79b851bb682d43a30d1b195c9186ac3deb5ddef529cc79ed448623282dbe0ad8f7c49854ee8c840e6820f3300654da4f31ca519b75e212cb5abb591e7ac66dee6d51e160ce1119a3f67af34f6ac75bcfbdd828be14106ec1ad7e3843b4cc6a7ae2350a0e248bf6e0e658c40834361f09551356fac6d688cdfe8edfcd61a7d4ad74e0da8993325afb82fdbacfd39c135812f489c65edc95495ebc9e8ba524935ed07664f47f31ba9e1b2b4b08bf90a1346fe628ef76c922f6d2d7b84c6c394af30a910bba24862b600e876c02dba79e5e7a60611f0e7c5ccb73a9568fc1d116c0af47e8114e38a1d35d59fc07f00cfb3ff305bf2712336dd874e97cfae38dff47f4a2ce59358843dfbd9d511f86e667013795d87251cc31260eee8fc4315a91e92f514ca63d2a84b86812495cb70afa0c9b453f1c6b1c7521a34dd2252dd64884f6a93234005bd6e97eaa70474b7d1c403b72efe861faf5c783209c6880545514dda8de0403440be62f18fe20c85af9f27d92343f2f4aab9ee9c2aead5a4ef7cef5017852be6c97763220aa3cb7f680a809d2b073a5d1a23675160f06ad3714d36adcae09491266b24fa0f6462965a39a68672bf3e13014154882af22221b50be2ed3ec934696e1f2ab59c7c7a71cedbf8711995a9eeb91d7ae04143f212a0c80948451c0878814aa8f95a128c6cdbf5530a18a5d5f4cc8c75f00088287a357d80c9991957122995036c6599b40b70a64114b4f3185955cefd5cfcc3e658cfc8c8b03a83de8603d7f57ebe3d2aca745ce9d5411f9b88050012955c353715cb639c8f4273b11630ec8e2466e1d26f74a277910ff92a233904d3722836d94f58b95f88d2e5816a49e02e39d7c2eef2c914071bb9e08d17c32506d52412cded232f1b615e622ccb45914beddf3b401349e2898469ced35d037f2328b3f240324e5edfaea327e85bf7498b169667ace0907d2ac929ac31ab8d4143188e4aa1393df85d07275507fd710fb6e0c8ae4594125a6d284cdb369cf64df808b26286e7bca61a0619a2d8df9e614d469d4e8db35831e741e4baf9d1dd273672e20464d592b90cb94960a8e19ebe4f3aa09c71328d8c7be3588085f93186b28ef12c5d58aaa14f61d0674b7b1f56a7741d2a8e503ea77edec23b7ba452cb028ae7ba5a3c368f51686655f325953ae5a255cb3606c9caa3f881b396f7f3b82b15f4052aa253e3eca4869351be6134eea89410954fbf7c32bd0007f2447caacf17362ae888016c091bd61dc3255359b63b7aff836d8dfce36f632523f42d6fc629102208b4ab994d2cb7a9d490bbab69ca2d28aa21f65205fead393797a87f8b84ed1e6cf241de47b8b979d08259e032c2fa8ac040d855d1805b2a59a2a76fabd1cbae433510f1aa74ad78c1f014696002ac7de1fee24d33351d540fe2f2f5c2be46f8120f008eefb232794c204cf22135d744aacf0f493f7f788773aa32f3366a2cd2be363e7069aabc9cf9e4086c4c5efb7b9e2c24a32269078a45f4988a46f8c80f3d3f2847ffb3eadab40cfefbc46cad6417263189896a0e3c4acfb21b2af63a8e357b745a843d01d8d5b08d072480bfb8009b58a508a1a79eeca77d6e81db7c8a696508882c7d40ee9e061c62298d5450e56ce4fb314a3b71a5c83565ef0260b2055ed12a7c25e3244b54d0ab942d0ae2818d57232a4d15d1dd1da59f1d91f0f67802eb55dae8e42e938177d6a95357cc01261648ea01a93681a3a760c566e5b867f37fe3c73fe277e5af33f34d7b0d1bc18d17aa86043380c5d57f378213f4fca0304dc1fbe66d05aff73c8e0c5915f3e8a27c3b48096e7424c961800aaf70787de8c76c5066d47074f4b9e9d40f086266c0809ba8a685f339e021f064fec182535ac23eb93c1bd059d465d5c0d43745c285611f89d46ed4bc8124256ea6711239b9ef3e32d2caa72de97df155db82bbb0c307f03decbd97d217474f8625bd1d00bb4ca806e908e31a0c0e24e2aef60aeaa80c8756fea8cc82e0c12efd0147ae9d1bec365397a03ea74af32b1834cda6b8df197512fde97a1c4f1d0bc198323594d57143d7b0e077804e428447b1a29636278f1e12eae0d663003c46fddf7e305412921f64c02f6c6bd4fd6d9c30567925f5f053532a55067c031efa1c6d9d15c07d2654c73dbe18217170e901af4caf1ea68253c0991f949d5876b812e97772e62a70c3e3f1833ef67eb9a453052a40c9464e98ecab813e132c5465cb9fad5b9777c22b00462f47e34e599203117cb3814597f573c6901bb34cda288417dc4944d31440d1cc5dbb04f983556b45eb1bd148f31ebdab5a3e5160dcb45b72ae30e1ff4361aafa79b77bda73839e81915b39256e7f010e635ed7a286451daabe333a12effc4b31c96cc981dc959b9a655ed4dea5759051d3fafe59662e1142b303123d29adb224d6bf3aa946419c714042c0ed7a79f57f5fdd1efdacc46fc43c1bfb4ebfab9b53c97edc8f7255c44230639d390dc369a031d524914adc6ffcf26bc7f7107c89364e905b4cbea32727401e93279050a1ed1f9b25c7109e7af2a5c4b1f9fc6d4ca4b7b326052f101b6ab588a90c736ad59d3804e2addf8f1b48bd9244393a05d8cf1376dd571fa1d0c8bb7ee8bf12583f43d6e51d6285dbb6080e2ce3df0783dbd0cc3012efcae681aa1bb4fbc10e6c5a3030728466898df4dbbe68f498a54385822bdf231b4ab0b363e51501629aec1820eda3a7addae8826003f4a5fb6417ab1ceebd334d88571954e070b89b2279d0ba1685edfda74b3c1cacaf18b40cd8486af8f1d46c4abc0993fe73c62a2d678a7fbca8d671e8dc77498e510e1d958162fe6269d92d129f6365cf26b3f7d6069a34105c6fadbe7f671bf0dd8f897f616b19dee91027bc53113d93ab3ae17c337a62b06adf7858703b595cd4f4046b78018254afd9685b58402d88ebfc31180f583d7b2ac3524c1cff99ab099b4b2bd82af4f993e9d00b7bcf61b1e388449c8d303dd58f89ec513c0f7dee7bec0f03e985fd5bf8669e5b878b02a72cc37632c82cfb7559888997ddc0092d01ef7c94f26ddd7f36f13e1adc932f2c87bf433181ef06b04f0b8771065060bf8c9cc39dab323778d0f1f13fddfa0f13953a4df0e7de4b38920a0d761c6ee5ae3553dcebf4462e651b8f7143028127288de80bd2ba8392a95a52b110a63eb7d4d063098bc852042738834a05875e18a4b7866c8c969fd65d4a1c5f62303a1198f93993f4114863a0e9de3c334a09dc7ac5ac24ff1fb34f04cd327655cda5c430b5e8548f2e584121eb0425b9e4e18bac1", 0x1000}, {&(0x7f0000002640)="e60e7516f73ad862ccb2c8c39743aabdca36321bc57aa35b8106f3ffd4842a91e85886cda2e2534bc6b68b1dd89eaa8b115c38ece30dc389f78534f9c71a37c5fb5c6a58871cf772cd68a30c75926cfe37f6cd4aeab6eb7a9b3488581d60e52d76a8f95e251d4d0cd261550b170c0e9491a51028d9d962b2951df0bdf983bbf1bdcef092c963377cce5d6082c076431c1dcc8aa7b5b81c4f3f7b67aaa99f6523936347690f982090f37ee4f802d269d5f583cbf71dc65ad60340a23ccd642fde5a3f93fb7cee65e3297e7620d4ab2fa7437b37e838087a4a68b852a9251945c1dd4cb5ee99ed7858", 0xe8}, {&(0x7f0000002740)="67b8389a90d377abc40e9398d325f61a437f6d005cc199e14f9f86cfcf2213e6fdcaa3b67fff16f49cb3890b0159020eba2ed7c00a276e7837e1c0558b52f3c500d8cc1c20a79af5745ea55e197cd990c6d086b56dc2b8873f9ada934a8cad1a02490861ef451481b4551d", 0x6b}], 0x4, &(0x7f0000000900)=[@sndinfo={0x1c, 0x84, 0x2, {0x9, 0x20e, 0x2, 0x3}}, @dstaddrv6={0x1c, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @sndinfo={0x1c, 0x84, 0x2, {0x2, 0x8304, 0x0, 0x584b, r7}}], 0x54, 0x4000000}], 0x7, 0x80) [ 2690.118163][T15834] ptrace attach of "/root/syz-executor.3"[15806] was attempted by "/root/syz-executor.3"[15834] 00:09:58 executing program 3: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000240)={0x0, 0x9, [@remote, @link_local, @local, @empty, @dev={[], 0x1d}, @empty, @link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote]}) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000eda0c3bf27a53e4b76657468"], 0x48}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) ioctl$KDSETLED(r5, 0x4b32, 0x3) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000209010300000000000000000700000708000340000000000c0002006400034000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) pause() ptrace(0x10, r0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') sendfile(r6, r7, 0x0, 0x800000080004105) write$dsp(r7, &(0x7f0000000000)="4dc35b8ffef8f9b30581b87947c1d9b25781ae684cb9b7700a7cc32c5ebe83acab176b4a1bd4d67c07469c3ebe89803198277fe27de5930700ecb471f8830fa300fdf630d856214a0114959199021d6d8a02012d669deb427fd09417f673b8a70d24ee4cbcdf8fbc0761de0c5a56c83016252336250f5c36fa45977cc608e6faf60d4f25d75c9424e21446dc1f128357f14c6d5ddc5ce842fa3f6b4a5ca9358dfa828023a36fc3f07348b4bc37ef86f4c7a777d7c68d64aad7d1b991ac7b8f11a970f08ed7f72c7223cd0e1ef6fa6dec1ae904b6ac253566329c106540b5aac4ae2e2204711c188955ff23e1fccd34360c63dd093ba4753b8061", 0xfa) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:09:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x3000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2690.283211][T15847] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:09:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x4000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x42d0000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x5000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xfc, @loopback}, 0x1c) 00:09:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x9000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:58 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x44c, 0x3f4, 0x400, 0x70bd25, 0x25dfdbfd, {0x5, 0x0, 0x20, [0x9, 0x0, 0x8, 0x8001, 0x9, 0xffffacc7, 0x0, 0x8e16, 0x3, 0x2, 0x8, 0x2, 0x80000001, 0x1, 0x1, 0x5f, 0x0, 0x10000, 0x1ff, 0x2, 0x1, 0x3, 0x8, 0x6, 0x7, 0x80, 0x3, 0x7, 0x1, 0x7, 0x8000, 0x80000001, 0x5036, 0x3ff, 0x7, 0x1, 0x80, 0x80000001, 0x8, 0x2, 0x82, 0x8, 0x5, 0x1, 0xfff, 0x8, 0x0, 0x400, 0x3, 0x7, 0x6, 0x2b, 0x6, 0x76, 0xdc2c, 0x546, 0x61, 0xfffffffe, 0x7, 0xec, 0xffff, 0x7fffffff, 0x4, 0x9], [0x6, 0x0, 0x5, 0x3, 0x306, 0x2, 0x100, 0x4, 0xbe, 0x3ff, 0x3f, 0x5, 0x7, 0x7fffffff, 0x5, 0xb9, 0x7, 0x3ff, 0x1, 0x7ff, 0x1f, 0x4, 0x0, 0xfffffffd, 0x81, 0x10001, 0xb9, 0x9, 0x7fff, 0xb03, 0x9, 0x4, 0x7, 0x7fff, 0x0, 0x7, 0x9, 0xffffff9a, 0xffff, 0x10001, 0x5ee8, 0x2, 0x20000000, 0xe0, 0x80000001, 0x2, 0x2, 0xfff, 0x3f, 0x100, 0x7, 0x8, 0xb0, 0x9, 0x8000, 0xffff, 0x0, 0x4, 0x6, 0x1, 0x80000001, 0x22f, 0x4, 0x5], [0xffffffe0, 0x1, 0x7ff, 0x6778, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x3, 0x1ff, 0x9, 0x8001, 0x9, 0x65, 0x28b, 0xa1, 0x52d, 0x9, 0x40, 0x5, 0xe57b, 0x1, 0x2, 0x6, 0x7, 0x4, 0x1, 0x3, 0x6, 0x5, 0x1ff, 0x1, 0x20, 0x1000, 0x2, 0x4, 0x3f, 0x1f, 0x0, 0xe000000, 0x84, 0xffffffff, 0x6, 0x8, 0x84, 0x6ba9e125, 0x1, 0xfffffffc, 0x7, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x9, 0x4, 0x7, 0x98b9, 0x1ff, 0x3ff, 0x9, 0xffffffff, 0x0, 0x8], [0x0, 0x3, 0x4, 0x6, 0xffff0001, 0x5, 0x7, 0x1, 0x5, 0x56, 0x7, 0x5, 0x0, 0x2, 0x5898, 0xff, 0xa9, 0x37aa552c, 0x4224, 0x6, 0x1f, 0x2, 0x7f, 0x480, 0x9753162, 0x8, 0x95, 0x5, 0x7ff, 0x2, 0x0, 0x400, 0x420f, 0x4256, 0xfff, 0x5, 0xffff, 0x200, 0x1, 0x9d, 0x5e2, 0x81, 0xd31, 0xffffffc0, 0x6000, 0x9, 0x4, 0x1, 0x8, 0x6, 0xffffffff, 0xff, 0x5a29, 0x1, 0x5, 0x9, 0x5, 0x6, 0x0, 0x81, 0x2, 0x0, 0x2, 0x8], 0x29, ['%\x00', 'threaded\x00', 'threaded\x00', 'threaded\x00', ']\x00', '\x00', 'threaded\x00']}, ["", "", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4004844}, 0x91) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mount(&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000040)='./file0\x00', 0x0, 0x2802000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2691.098018][T15869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xa000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf000000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x9effffff, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xf0ffffff, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:09:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x300, @loopback}, 0x1c) 00:09:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xfffff000, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:09:59 executing program 3: gettid() r0 = getpgid(0x0) rt_tgsigqueueinfo(r0, 0x0, 0x7, &(0x7f0000000280)={0x3}) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x9, 0x5, 0xf9, 0x2, 0x0, 0x3, 0x50, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x7}, 0x43000, 0x8, 0xb68, 0x8, 0x2, 0x4, 0x800}, 0x0, 0x200, r1, 0xa) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() pause() ptrace(0x10, r3) ptrace$getregs(0x3, r3, 0x0, &(0x7f0000001140)=""/4090) r4 = fcntl$getown(r2, 0x9) ptrace$setregset(0x4205, r4, 0x201, &(0x7f00000000c0)={&(0x7f0000000180)="ec228633f711a1b461e71bce853be42879eda2d0eb89976f55113d0082ebd4279dd4fe279f30b58d43240d1af9871b992ddb56a5d435448b944635c4cf73eae6276890ec2af55a75353444b7e4040b67311230bcd0212ede3855055c5a3eb8a878d0d28906d923f0c3abef6aaff7cb1405ee1f1d2dc4721d361a0074945e98afa33fc3b7c0", 0x85}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xffffffffffffffef}, 0x1, 0x0, 0x0, 0x1}, 0x1) 00:09:59 executing program 5: inotify_init1(0x81000) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) syz_open_pts(r1, 0xc80) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:09:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xffffff7f, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xffffff9e, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xfffffff0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0xffffffff, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x500, @loopback}, 0x1c) 00:10:00 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480001010000000000000300e3ffffe230011100", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00002100090001006866736310f9ffff070002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000002800270d008000"/20, @ANYRES32=r5, @ANYBLOB="04000000000000000000000007000100667700001800020014000300766574683100"/44], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mount(&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r6, @ANYRESOCT=0x0], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xa0400, 0x61, 0x15}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @local, @mcast2}}) 00:10:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:00 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = dup2(r1, r0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r6, 0x0, 0x9, &(0x7f0000000140)='/dev/fb0\x00', 0x0}, 0x30) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r8}, 0xc) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r4, r9, 0x0, 0x800000080004105) write$snddsp(r9, &(0x7f00000001c0)="646eadf49f9f08193db8f66ba7cb21aa24e28a7bc6e6f33ba5810e0583c734f772cc1168797a142659cbf6fe600d369ff5fc41d8c1fe3fe738412d0a208a14eaecb9c386bad3f8d92613552908317ff3a4b063571537d13404cf090d04efc862f9366582f861c555b888a01daea312cff0f31ad9fc51aebfd9169667fa83e84d16d5b47d1c3595fff8c28bd9388084bf6077b2e81df036756406a398680e6a29082e0a5b6d7ba76c223df2bbe457da44f3e9d33935f9796a90f427940ba7acea2176c018feaba5c51e0f9f78", 0xcc) connect$bt_rfcomm(r3, &(0x7f0000000100)={0x1f, @fixed={[], 0x11}, 0xff}, 0xa) 00:10:00 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001000)=""/4091) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x7a01, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x25, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000080)={0x4f8, r4, 0x101, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xff, @remote, 0x29}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd78}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x966}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x224}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x15c9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc135}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff8428}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "bbac60529819a7d84002c916e91e9b3c06f5151ded2248c7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "c90a8ee2b8f8efffdfc04bc7617c3c172433cc83b618f0"}}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "a2f83cdf8122f1cb26433841a49ef6c38f34df5dd3b71afd5224e56da5a2d5053e5a840f446ae764b25c0bb8f110f88d932a81b3b7bf2da0ad5bf7ddfcee4859d086260c8fd5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "abde1be597a2622e36e1b53e75b112c21f14ebdda0958d"}}, @TIPC_NLA_NODE_ID={0x31, 0x3, "c5692430cffee0334362ed426691230fbb61f7a3379114d4b63bf006b9e5d77c7906781a8be344b139e703ddec"}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9000}]}]}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x8000}, 0x20d4) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x22aa00, 0x0) ioctl$NBD_CLEAR_QUE(r6, 0xab05) 00:10:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @local, @mcast2}}) [ 2693.109462][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2693.159711][T15948] tipc: Invalid UDP bearer configuration [ 2693.159736][T15948] tipc: Enabling of bearer rejected, failed to enable media 00:10:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @local, @mcast2}}) 00:10:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @local, @mcast2}}) 00:10:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, @local, @mcast2}}) 00:10:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:01 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f0000000140)=""/64, 0x40) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:01 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = fsopen(&(0x7f0000000340)='efivarfs\x00', 0x0) sendfile(r2, r3, 0x0, 0x80004104) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'xfrm0\x00', 0x2000}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000001c0)={0x81, 0x6}) r4 = openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x308183, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000240)=0x200) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000f6af67730007000000000000000300000000000000030000b5b5f406001f00000000000000080000000000000004e4ff0000000000010000000000000003000000000000001f000000000000000b000000000100000700000027523e00000000ff0f00fafffffffffe0300000000010000000000000000000080000000007a00000000000000d1060000000000007b7c3b9ead01e0bcfdf2b17e3cefd83d67822227e3830e7235150271fa6dc96a3bdf00"/192]) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r7, r8, 0x0, 0x800000080004105) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f00000000c0)={0x3c0, 0x10, 0x556, 0x1e0, 0x80000001, 0x8000, 0x20, 0x0, {0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x0, 0x40, 0x1}, {0x3, 0x2, 0x1}, 0x1, 0x80, 0x200, 0xce, 0x1, 0x2, 0x9, 0x2, 0x1f, 0xa2fd, 0x7f, 0xdaf, 0x12, 0x5, 0x3}) dup2(r1, r0) 00:10:01 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) r1 = gettid() r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x218000, 0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x500) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) write$6lowpan_enable(r2, &(0x7f0000000180)='1', 0x1) r5 = getpgid(0x0) rt_tgsigqueueinfo(r5, r1, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x7ff, &(0x7f0000000000)=""/178) 00:10:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x600, @loopback}, 0x1c) [ 2693.894667][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2693.912905][T15979] tipc: Invalid UDP bearer configuration [ 2693.912929][T15979] tipc: Enabling of bearer rejected, failed to enable media 00:10:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @mcast2}}) 00:10:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:01 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r1 = getpid() pause() ptrace(0x10, r1) ptrace$getregs(0xc, r1, 0x40, &(0x7f0000001000)=""/4106) 00:10:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @local, @mcast2}}) 00:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, @local, @mcast2}}) 00:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0xf}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:02 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffffffffffff9d) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x4000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x1, 0xd1, 0x4, 0x600000, 0x6, 0x8000, 0x4, 0x6]}) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r2, &(0x7f0000000080)=@random={'security.', '\x00'}, &(0x7f0000000180)='\xdb-:-]\x00', 0x6, 0x1) socket$inet6(0xa, 0x800, 0x3) 00:10:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @mcast2}}) 00:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x700, @loopback}, 0x1c) 00:10:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x280, 0x0, 0xffff, 0xf, 0x0, {0x0, 0xffff7fff}, {0x0, 0x2200000}, {}, {0x0, 0x3, 0xffffffff}, 0x0, 0x0, 0x3}) dup2(r1, r0) 00:10:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @local, @mcast2}}) 00:10:02 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r7 = gettid() r8 = getpgid(0x0) rt_tgsigqueueinfo(r8, r7, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) sched_getscheduler(r7) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup2(r1, r0) 00:10:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @mcast2}}) 00:10:02 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = msgget$private(0x0, 0x2) msgsnd(r1, &(0x7f0000000140)={0x3, "4e6a078c1f9da748bc6e4de08ca512e4e74702a4e40a8024004e1ed9810e5936ce8cf9d41a6b53b0b5d7118b269d4b79aa2ce912"}, 0x38, 0x800) creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:10:02 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r3, 0x1a, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0xfffffff8, @loopback, 0x6}}}, 0x118) ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:10:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @local, @mcast2}}) 00:10:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @mcast2}}) [ 2695.166583][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:10:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xa00, @loopback}, 0x1c) 00:10:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:03 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$snddsp(r1, &(0x7f00000000c0)="f1a4c004f0f0df1e35f9eeaf0cef3f5d5a42788ef64b96d43d9f4ff025720374441c68bedd636b415e46167e442fec051a8e2ce86a0efa0b052d34c505e01faa8cdd2ce7ab23ac68013f07bded2ebf4f320a5be0f08c683f3a9845", 0x5b) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @local, @mcast2}}) 00:10:03 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f00000000c0)) dup2(r1, r0) 00:10:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @local, @mcast2}}) 00:10:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:03 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'macvtap0\x00', 0x2000}) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x1030008, 0x4) 00:10:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @mcast2}}) 00:10:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, @local, @mcast2}}) 00:10:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0xf}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2696.136717][T16110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2696.236681][T16110] device macvtap0 left promiscuous mode 00:10:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x3f00, @loopback}, 0x1c) 00:10:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, @local, @mcast2}}) 00:10:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:04 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x10004, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, {}, {}, {}, {0xffffffff}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_GETXATTR(r4, &(0x7f0000000340)={0x18, 0x0, 0x6, {0x800}}, 0x18) r5 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc005) openat$vhci(0xffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x5615c1) dup2(r1, r0) 00:10:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, @local, @mcast2}}) 00:10:04 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() getpgrp(r0) r1 = gettid() r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r1, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) r3 = gettid() r4 = getpgid(0x0) rt_tgsigqueueinfo(r4, r3, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) ptrace(0x10, r2) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) ptrace$getregs(0x3, r5, 0x0, &(0x7f0000001140)=""/4090) 00:10:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:04 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, {}, {}, {}, {0x7}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) dup2(r1, r0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000000c0)) 00:10:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, @local, @mcast2}}) [ 2696.924242][T16119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x4800, @loopback}, 0x1c) 00:10:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x2900, 0x0, @local, @mcast2}}) 00:10:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:05 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x121002, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:05 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$fb0(0xffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x10000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={r5, 0x6}, &(0x7f0000000380)=0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) r8 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000400e55133c9a73d4f1547fe92fdc2041a84a5370ae0c27f7022d86b44abffffffff00000000d96d5458ac8cdb", @ANYRES16=r8, @ANYBLOB="04002dbd7000fbdbdf250f000000080004000700000004000280"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x8800) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f0000000100)) dup2(r1, r0) 00:10:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, @local, @mcast2}}) 00:10:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, @local, @mcast2}}) 00:10:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, @local, @mcast2}}) 00:10:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xf}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @local, @mcast2}}) 00:10:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x4c00, @loopback}, 0x1c) 00:10:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xf0}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @local, @mcast2}}) 00:10:06 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x100) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:06 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x103801, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x684, 0x7}) dup2(r1, r0) 00:10:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, @local, @mcast2}}) 00:10:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x300}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x42d}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @local, @mcast2}}) 00:10:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, @local, @mcast2}}) 00:10:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x500}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @local, @mcast2}}) 00:10:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x6800, @loopback}, 0x1c) 00:10:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x900}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, @local, @mcast2}}) 00:10:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000140)) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000100)={0xff, "2262ebe37ee7f46aecf4342fe67247ab69f8ae663a032ea54670ff70a3a47901", 0x2}) dup2(r1, r0) 00:10:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x3, 0x0, 0x6, 0x80, 0xda, 0x2, 0x2, 0xff, 0x0, 0x0, 0x7, 0x69, 0xc154}, {0x80000001, 0x1000, 0x0, 0x5, 0x9, 0x0, 0x80, 0x7, 0x7f, 0x3f, 0x81, 0x5, 0x8001}, {0x1, 0x9, 0xfa, 0x81, 0x7, 0x40, 0x20, 0x1, 0x6, 0xfe, 0x3, 0x1, 0x4c}], 0x9}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e) 00:10:07 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)={r5}) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:10:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @local, @mcast2}}) 00:10:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xa00}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:07 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'ipvlan0\x00'}}, 0x1e) 00:10:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x29000000, 0x0, @local, @mcast2}}) 00:10:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xf00}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, @local, @mcast2}}) 00:10:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x6c00, @loopback}, 0x1c) 00:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0x2d04}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, @local, @mcast2}}) 00:10:08 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='./file0\x00', 0x0, 0x2042000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = dup2(r2, r0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x6, 0x2, 0x80, 0xaa, 0x0, 0x7f, 0x8, 0x9, 0x2, 0x56, 0xf9, 0x2d, 0x0, 0x1f, 0x6, 0x3f}}) 00:10:08 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000571b325bb500000900010068667363000000003df1cc0b30fcf58ba0af278c6f385214752b6c7537bf044c9138b7879473fa7a7109886324dd1e960392709d4974e8a92f4c6d75d2d0ed942b056bed"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400006b28002707e1000000000000000000000097160f8a51e836039401503d87b2be3a80e40d4f2f315c79cc2c8edb62778f5dcb98d8393e3f229411ef8932c40a37d60becbbbee7f1f4a00eb1d3c137d4548c0830dfb3ef799c646c02b21f49cfd17dd1e6f8e30a869c53c38a0486a8cf781700703d673bd6a5eee3442cd8ca3e", @ANYRES32=0x0, @ANYBLOB="04000000000000000000000007000100667700001800020014000300766574683100"/44], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000021c0)={0x6, 0x2, 0x3, 0x7f, r7}, &(0x7f0000002200)=0x10) ptrace(0x10, r0) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000000500)=""/4090) 00:10:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, @local, @mcast2}}) 00:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xf000}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2700.743469][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, @local, @mcast2}}) 00:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) [ 2701.077118][T16292] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 00:10:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x7400, @loopback}, 0x1c) 00:10:09 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80000, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r7, 0x40}, &(0x7f0000000180)=0x8) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000200)={0x8, 0x5, [{0x3da19d81, 0x0, 0x9}, {0x0, 0x0, 0xeb49}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x200}, {0x11, 0x0, 0x83}, {0x64d, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9}]}) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f00000000c0)) 00:10:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @local, @mcast2}}) 00:10:09 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = openat$vcs(0xffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200000, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000140)={0x10, 0x0, 0x7}, 0x10) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000000c0)) 00:10:09 executing program 3: clone(0x6014000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() sched_getparam(r0, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000001140)=""/4090) socket$nl_rdma(0x10, 0x3, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) 00:10:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @local, @mcast2}}) 00:10:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0xb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2701.514663][T16297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2701.637127][T16306] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:10:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @local, @mcast2}}) [ 2701.775819][T16313] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2701.822309][T16313] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 00:10:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @local, @mcast2}}) 00:10:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @local, @mcast2}}) [ 2701.979943][T16327] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2701.979959][T16327] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 00:10:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @local, @mcast2}}) 00:10:10 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$autofs(0xffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x881, 0x0) r3 = openat$full(0xffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x44a181, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@bridge_dellink={0x28, 0x11, 0x202, 0x1, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0xc010, 0x80}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x800000080004105) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r4, &(0x7f00000000c0)="e6b5f1fa317e5ab0cb6158f484db7805795e486c92fcab1c62f672465de3bb5ca9bda1e12ed5bc0e8a0d53d372ed42d85a31ad60e4903ef04f200ec074ecfc1df81e664692f9498443e6d31d02f3e38d0717df562ee372fc46a3851c3de96b94fc96eba66130518a12e04a7db5fc08ba26bd89f7c38361e1b6040fa3dbd0b178637803e05369729a6aedd262fc4d3082c5", &(0x7f0000000200)=""/79, 0x4}, 0x1c) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x7a00, @loopback}, 0x1c) 00:10:10 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'sit0\x00', r5, 0x29, 0x7, 0x1f, 0x5, 0x34, @ipv4={[], [], @loopback}, @remote, 0x7, 0x20, 0x2, 0x8}}) r6 = socket(0x5, 0xa, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x81}, 0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) [ 2702.552753][T16341] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 00:10:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @local, @mcast2}}) 00:10:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x3c}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:10 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = gettid() r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r1, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r3, r4}, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x3, 0x100, {r2}, {r3}, 0xfffffffe, 0x5}) wait4(r5, &(0x7f0000000100), 0x20000000, &(0x7f0000000140)) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) epoll_create1(0x80000) read$usbmon(r7, &(0x7f0000000040)=""/119, 0x77) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x113000) 00:10:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, @local, @mcast2}}) 00:10:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:10 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xf2b, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80420130}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x520, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6c}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x27}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c841}, 0x8000) ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:10:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @local, @mcast2}}) [ 2702.745940][T16354] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2703.092729][T16373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x80fe, @loopback}, 0x1c) 00:10:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:11 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @local, @mcast2}}) 00:10:11 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x20, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2}) dup2(r1, r0) 00:10:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @local, @mcast2}}) 00:10:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @local, @mcast2}}) 00:10:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5de7) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r2, r1) 00:10:11 executing program 3: clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'hsr0\x00', {0x2a, 0x1, 0xffffbffe}}) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:10:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x14}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2703.865074][T16404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900, @local, @mcast2}}) 00:10:12 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fb82, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$sock_netdev_private(r4, 0x89fb, &(0x7f0000000340)="7a3b2f094e934fa4553cc9fc612a0c75fc4fb632a27bc8a99765bda6c06c219bb67f2262d3f92c82aa81c5f64ce89e76a85c7673136e3166ad0488246d18ab5dffaede4ab8e264ca614c776274d67404893e6b6a7f1e8a37456538b4732e766ee07517ce622fd768034d68e58561bcf98d2c6de708a8da68895d4666ccd7e37e1ba71bc4908638fac7a6bfc1866f6855beef589aec3af2a7d0a7429392b7b3d3dc5ea228e3ec9c40ef93801f41d7a4af2d4d81f250a04a366b8ac7356f2251da38a47a3eb46f4774b37ec0516450ec3f2c09978bc84ee31317fb") ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x1181ed74, 0x3, 0x8, &(0x7f0000ffd000/0x2000)=nil, 0x7}) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:10:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xc0fe, @loopback}, 0x1c) 00:10:12 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$nvram(0xffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x40, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000100)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:10:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, @local, @mcast2}}) 00:10:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, @local, @mcast2}}) 00:10:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:12 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() mq_open(&(0x7f0000000000)='\x00', 0x80, 0x80, &(0x7f0000000040)={0x6, 0x4, 0x40, 0x4}) ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:10:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, @local, @mcast2}}) 00:10:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @local, @mcast2}}) 00:10:12 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xac, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xac}}, 0x800) [ 2705.289857][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xfc00, @loopback}, 0x1c) 00:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004105) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6a030002100005f583c2b9a87323f4bd8cb68090d22d840795b7130a4253d1e6afa7b5c230b2983b1cca7e7a7fc3f4891c3a2cfdd1c68d84708a5710461fc6142fee3efb067837cc54a53239134180480000e964b1c34c19981949abf4e8feadbc1a5d943293b2dd2ce766a004e7c791a273aecec7a982f84eec0e7f5add206895002fbe7876363eed16befa326a784c533ed996bf4d1a727a38f67ff7cbbccb110382771d3db80d5d49cd8e0cad29c0496ac4ba10f8a656f3b05b4310a811f080017ac2c7c574892e24083791f69384f25200648300eecaf664928ad3b77aa075030bc171088f3586e0d00db130bc58", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00@\x00'/20, @ANYRES32=r7, @ANYBLOB="04000000000000000000000007000100667700001800020014000300766574683100"/44], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x5, 0x8001, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7800, 0x20, 0x8, 0x3}}) dup2(r1, r0) 00:10:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @local, @mcast2}}) 00:10:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @local, @mcast2}}) [ 2705.397323][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:13 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mount(&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYBLOB="51661de51a85cf3902492ce40c72728f26f30f24b392a7b2e54c3a9425e6e2bbc9ca631c24e0bc8cdecde44160659884a12457c4563332191091f292ca0e2ce4de24fab16c028fa674e3e449", @ANYRESDEC=r1], &(0x7f0000000040)='./file0\x00', 0x0, 0x10001, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="040000bebe000000000000200002000d000100"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xfff3, 0x1}, {0xb, 0xffe0}}}, 0x24}}, 0x4000004) r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f00000000c0)={0x1, 0x1, 0xffffffff, 0x0, 0x1, 0x2}) [ 2705.680798][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:13 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r3}) 00:10:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @local, @mcast2}}) 00:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280035000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r8, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb4}}, 0x8000) dup2(r1, r0) 00:10:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2706.007882][T16527] __nla_validate_parse: 1 callbacks suppressed [ 2706.007893][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2706.053546][T16528] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xfe80, @loopback}, 0x1c) 00:10:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @local, @mcast2}}) 00:10:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:14 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x2c95, @mcast1, 0x1}}}, 0x84) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:14 executing program 0: pause() r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000100)={0x9e0000, 0x8001, 0x80000001, r1, 0x0, &(0x7f00000000c0)={0x990afe, 0xee92, [], @value=0x2}}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) dup2(r1, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06055c8, &(0x7f00000001c0)={0x10, 0x8, {0x52, 0x5, 0x20, {0xfff}, {0x2, 0x6}, @cond=[{0x2f3, 0x0, 0x3ff, 0x3, 0x101, 0xfffc}, {0x6, 0xf001, 0x1ff, 0x9, 0x9, 0x3f}]}, {0x51, 0x8, 0x1c2, {0x1000, 0x4}, {0x1, 0xfff8}, @ramp={0x9, 0xbf, {0x80, 0xff22, 0x0, 0x8b}}}}) 00:10:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @local, @mcast2}}) 00:10:14 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000080)={@private=0xa010101, @local}, 0x8) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000000)={{0x0, @name="b4ae64ab9f63a0608a09e35dd7a3859370cfbba1104be31f2990f86913d790ad"}, 0x8, 0x1, 0x1}) 00:10:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @local, @mcast2}}) 00:10:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @local, @mcast2}}) 00:10:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xfec0, @loopback}, 0x1c) 00:10:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000, @local, @mcast2}}) 00:10:15 executing program 5: r0 = openat$vsock(0xffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x7f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x84) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:15 executing program 0: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x60000) r5 = openat$sequencer(0xffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2001, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f00000001c0)={"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"}) sendfile(r3, r4, 0x0, 0xffffff30) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000077afbad6eaa24761000000000600000000000000"]) dup2(r2, r1) 00:10:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, @local, @mcast2}}) 00:10:15 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket(0x10, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) pause() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) 00:10:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, @local, @mcast2}}) 00:10:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2707.824647][T16616] QAT: Invalid ioctl [ 2707.863261][T16616] QAT: Invalid ioctl 00:10:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0xff00, @loopback}, 0x1c) 00:10:16 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x1c1000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, @local, @mcast2}}) 00:10:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06464b8, &(0x7f00000000c0)={0x8, 0x5, 0x8, 0x0, 0x3, [0x6, 0xfff, 0x0, 0x8], [0x1000, 0x161, 0xdb0, 0x3], [0xffff, 0x7, 0xfffffff7, 0x2], [0x4, 0xfffffffffffff000, 0x7, 0x5]}) dup2(r1, r0) 00:10:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, @local, @mcast2}}) 00:10:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:16 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000f70001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1\x00'}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r6, 0x29, 0x4, 0x5f, 0x101, 0x8, @remote, @private0, 0x80, 0x20, 0x5, 0x8}}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) 00:10:16 executing program 5: socket$tipc(0x1e, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0xe, 0x3, 0x0, 0x0, "333aa856c3fb3bed0f46c25a44116735a66f609fcf9b3efd49555ec4676da704ad4b384c31229b0ad1623443c4ffadfeacb6b85886717fd067851685d1fb902b"}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044015) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x164) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:16 executing program 3: clone(0x200822253fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) r1 = getpgid(r0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x40, 0x6, 0x0, 0x80000000, 0x80, 0x8, 0x8000, 0xa261}, 0x0) [ 2708.700613][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2708.788988][T16657] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2708.898627][T16662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2708.908902][T16653] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:10:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x1000000, @loopback}, 0x1c) 00:10:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x2]}, @mcast2}}) 00:10:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:17 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:10:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff6dc}) dup2(r1, r0) 00:10:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x3]}, @mcast2}}) 00:10:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2709.252202][T16676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x4]}, @mcast2}}) 00:10:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x5]}, @mcast2}}) 00:10:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:17 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="0c8d1634d5842ae2db4919b58a5a8be54371911a9b0788dd568eeb3e9590645fc66920083e4bf21683ab65303b7139522078ab348055f96b23dc42b4f9a7e6dab7b520095434e73f3777c97baddd3e8f26fe90d2154572ba5b87b87e0addfdbda0e8d4d3178d0898aec2dad3f5e7bce68da4619c064d7c2b4f607cb730a9b67a230d31fe76caeb2aebae0d48c325e48ba89aa4b657016eacb47215c2") pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) [ 2709.622139][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x2000000, @loopback}, 0x1c) 00:10:17 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000000c0)={0x30, 0x0, 0x690, 0x400, 0x1, 0x0, 0x4, 0xfffffffe, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}) dup2(r1, r0) 00:10:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x6]}, @mcast2}}) 00:10:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:17 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000013c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$nl_rdma(0x10, 0x3, 0x14) listen(r1, 0xa65) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="c305000000000000770000000000000006000000ff00000005000000f8ffffffffffffff0400000000000000ffff000000000000000000000000000000000000000000000020000000000000000000000000000001000000000000000080000000000000af07000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000400000000000000ff0f000000000000000000000000000000000000000000000c38000000000000000000000000000006000000000000008100000000000000018000000000000000e20ce5d437f0f6c500000000000000041000000000000000000000000000000400000000000000ff01000000000000060000000000000000000000000000000000000000000000000800"/308]) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) ioctl$MON_IOCX_GETX(r0, 0x400c920a, &(0x7f0000000180)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/4096, 0x1000}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000100)) syncfs(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getegid() pipe(&(0x7f0000001340)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000001400)=0x2, 0x4) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r4, r5}, 0xc) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r5) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x7]}, @mcast2}}) 00:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x8]}, @mcast2}}) 00:10:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x29]}, @mcast2}}) 00:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:18 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r6, @ANYBLOB="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"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x38}}, 0x4044000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', r6, 0x2, 0x1, 0xe1, 0x4, 0x11, @dev={0xfe, 0x80, [], 0x3b}, @local, 0x90, 0x40, 0x2e40, 0x2}}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000f1ad4e72e4639ab81741b2b23b5589f9a061fc145829715b476239a1daacb955dd9cbfc47eb3c874c15b3046294f7e183e1a01c8b6113ebccd94f386df80b3aa3aa2292f7745b678301076c85c9eec40e8dc9e87cb3b984b643d55f82f43dc2a0100000000000000cca1fee75744"], 0xc) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000001140)=""/4090) [ 2710.551690][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2710.593358][T16742] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x3000000, @loopback}, 0x1c) 00:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:18 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) getdents(r0, &(0x7f00000000c0)=""/14, 0xe) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:18 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) write$P9_RWALK(r2, &(0x7f00000000c0)={0x3d, 0x6f, 0x2, {0x4, [{0x20, 0x4, 0x7}, {0x40, 0x4, 0x2}, {0x0, 0x2, 0x2}, {0x10, 0x2}]}}, 0x3d) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r3, r0) 00:10:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xa00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2]}, @mcast2}}) 00:10:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xa01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:19 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x10000, &(0x7f0000001040)=""/4110) [ 2711.358874][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:10:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xa02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x3]}, @mcast2}}) 00:10:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xa03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x4000000, @loopback}, 0x1c) 00:10:19 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x22) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xb00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x4]}, @mcast2}}) 00:10:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x5]}, @mcast2}}) 00:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xb01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xb02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x6]}, @mcast2}}) 00:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xb03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x7]}, @mcast2}}) 00:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xc00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x8]}, @mcast2}}) 00:10:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x5000000, @loopback}, 0x1c) 00:10:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x898, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x5af, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x2}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2b4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x32, 0x1, "403f03393a8f671afd4f93a9233ade0cd4ed4a66b67723430a0c6e464be8d301a3954adb1feef39bc678fe1ec291"}, @NL80211_BAND_6GHZ={0x2c, 0x3, "8f32f8567160cb675464a1bbe0cc3ef9ac5af517620566acc45792eb737c449f40a9140696a49d6e"}, @NL80211_BAND_5GHZ={0xc6, 0x1, "15ced3e510fd89950d85076ca1fb5abb9f111c66eb9bf9937d9d48ea9fe1b7838ebc0f0e59e8492efa399230bc5f452a46314140885e6c84119e07ab9ad847d0366d9a84d756007fb95eb844749590ad81074510c047d4e9a5a6a94d89df3c753a0c6b1d6f7a9bb587c5a831eeff175c44f23ba1731237d2aad4574506d21aa1e76dbdcc354bb47e7aa1f2e177398ba1b360610cf3e5492686919dbe231414625096e43c6f2f11ad6fdfb49e6424a3dee3e6bd708fab1f978caa278e97788365f144"}, @NL80211_BAND_6GHZ={0xd7, 0x3, "85ba4fc87f63e314209a754232d854c2348d320e3553235db631d7b49a40ec0ca24e6f4b74d1204ca662160345d16a6d0708ed12e7d546d26f3e02c2c032046cbc94afa112aad255d60e36beac9dc14da6820233fee779b3e9f0176de27506dcc7698196ac0cdebefee064eb87a1fe1090659526d06fdd27e5182d3c3ab1e3d5dc3bec80bb5532c70b5d3293c9b4b0570dc5d347accff21baf248a7aa66747b0ecfc80e2d32b1ee8c550fe3c8a5a941a3849bf44707827b66aa594e3070aac137144673cf3e7434671eb16aac9a3bfcfbd9325"}, @NL80211_BAND_2GHZ={0xae, 0x0, "ef11e6fdc1a4c25a3019a53cacfa9b3a764444443b281e9ce18251bfdaa72145bb5667e9ab4baebf456483b40992f7fc5c506f411a09018178933c4c74f2f3d703672536de5c3a0e1e3dd4fcd7bcc35e8fc0cc1fda9d22ad93c3e679b4112486e0f27e1e4320fd172a43cc1ebcc2913925b62505cb3f73b2077c83a3b53f1c30f6fc2a597316c06b68148fd8c5d6eddb78230fc454d5d1441cce22528cd91db7aa3a5a02e9a765bc54bd"}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x5090}, 0x4000040) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xc01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x29]}, @mcast2}}) 00:10:20 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r1, r2}, 0xc) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r3, r4}, 0xc) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r4) setresgid(r0, r2, r4) clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) pause() ptrace(0x10, r5) ptrace$getregs(0x3, r5, 0x0, &(0x7f0000001140)=""/4090) 00:10:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xc02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xc03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) dup2(r1, r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, r3) 00:10:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x2]}, @mcast2}}) 00:10:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x3]}, @mcast2}}) 00:10:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xd00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) [ 2713.800933][T16853] ptrace attach of "/root/syz-executor.3"[16824] was attempted by "/root/syz-executor.3"[16853] 00:10:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x4]}, @mcast2}}) 00:10:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xd01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = dup2(r1, r0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000000c0)=""/23) 00:10:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x6000000, @loopback}, 0x1c) 00:10:21 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r4, 0x5}, &(0x7f0000000080)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r5, 0x0, 0x800000080004105) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x9) r6 = getpid() pause() ptrace(0x4207, r6) ptrace$getregs(0x3, r6, 0x0, &(0x7f0000001140)=""/4090) 00:10:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xd02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x5]}, @mcast2}}) 00:10:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xd03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x6]}, @mcast2}}) 00:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xe00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x7]}, @mcast2}}) 00:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xe01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:22 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x248a00, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 00:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xe02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x8]}, @mcast2}}) 00:10:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x29]}, @mcast2}}) 00:10:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x450000, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x10001, &(0x7f0000ffb000/0x3000)=nil, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x4, 0x2, {0xfffffffd}, {}, {0x0, 0x1, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) pipe2$9p(&(0x7f0000000140), 0x800) dup2(r1, r0) 00:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xe03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:22 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = syz_open_dev$vcsu(&(0x7f0000001080)='/dev/vcsu#\x00', 0x10001, 0x492c83) write$rfkill(r3, &(0x7f00000010c0)={0xb5, 0x4}, 0x8) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80104132, &(0x7f0000001040)) ptrace(0x10, r0) ptrace$getregs(0x3, r0, 0x0, &(0x7f0000000000)=""/4098) 00:10:22 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00'], 0x20000013}) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400000}]}, 0x1c}}, 0x10) 00:10:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x7000000, @loopback}, 0x1c) 00:10:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2}}) 00:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xf00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:22 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x381400, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x384, 0x0, 0x0, 0x4, 0x2}) r2 = dup2(r1, r0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000002800270d0000000000000000a7dc9f05", @ANYRES32=r7, @ANYBLOB="0400000000000000000000000b0001006367726f75700000200002001c00010018"], 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0400000000000000000000004c010100667700001800020014000300766574683100"/44], 0x44}}, 0x0) r8 = dup2(r2, r4) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r10, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x8, 0x7, "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", 0x4d, 0x0, 0x4, 0x9, 0x0, 0x20, 0x1f, 0x1}, r10}}, 0x120) 00:10:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, @mcast2}}) 00:10:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xf01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}, @mcast2}}) 00:10:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xf02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}, @mcast2}}) 00:10:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0xf03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:23 executing program 3: clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x402040) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x2, [0x4, 0xffffffff]}) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbe}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x1000c8c5}, 0xc011) r2 = getpid() pause() ptrace(0x10, r2) ptrace$getregs(0x3, r2, 0x0, &(0x7f0000001140)=""/4090) 00:10:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}, @mcast2}}) 00:10:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) 00:10:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_REVISION={0x5, 0x1001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 00:10:23 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000040)='./file0\x00', 0x0, 0x2002000, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000000c0)=0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x0, 0x9}, 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 2715.310720][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2715.372233][T16944] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2716.063446][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2716.064020][T16944] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2716.064518][T16968] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2775.512998][T19819] tipc: TX() has been purged, node left! [ 2777.771138][T19819] tipc: TX() has been purged, node left! [ 2777.952731][T19819] tipc: TX() has been purged, node left! [ 2778.131115][T19819] tipc: TX() has been purged, node left! [ 2778.301064][T19819] tipc: TX() has been purged, node left! [ 2778.461055][T19819] tipc: TX() has been purged, node left! [ 2868.943683][ T1146] INFO: task syz-executor.0:16938 blocked for more than 143 seconds. [ 2868.943696][ T1146] Not tainted 5.8.0-rc4-syzkaller #0 [ 2868.943702][ T1146] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2868.943710][ T1146] syz-executor.0 D24536 16938 6860 0x20024004 [ 2868.943732][ T1146] Call Trace: [ 2868.943760][ T1146] __schedule+0x8e1/0x1eb0 [ 2868.943784][ T1146] ? io_schedule_timeout+0x140/0x140 [ 2868.943808][ T1146] schedule+0xd0/0x2a0 [ 2868.943828][ T1146] schedule_preempt_disabled+0xf/0x20 [ 2868.943843][ T1146] __mutex_lock+0x3e2/0x10d0 [ 2868.943862][ T1146] ? get_fb_info.part.0+0x18/0x80 [ 2868.943878][ T1146] ? fb_open+0xd3/0x430 [ 2868.943900][ T1146] ? mutex_lock_io_nested+0xf60/0xf60 [ 2868.943919][ T1146] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2868.943942][ T1146] ? lock_downgrade+0x820/0x820 [ 2868.943960][ T1146] ? kobject_get_unless_zero+0x15a/0x1e0 [ 2868.943982][ T1146] fb_open+0xd3/0x430 [ 2868.944001][ T1146] ? get_fb_info.part.0+0x80/0x80 [ 2868.944015][ T1146] chrdev_open+0x266/0x770 [ 2868.944031][ T1146] ? cdev_device_add+0x210/0x210 [ 2868.944051][ T1146] ? security_file_open+0x1f5/0x3f0 [ 2868.944072][ T1146] do_dentry_open+0x501/0x1290 [ 2868.944088][ T1146] ? cdev_device_add+0x210/0x210 [ 2868.944111][ T1146] path_openat+0x1bb9/0x2750 [ 2868.944137][ T1146] ? path_lookupat+0x830/0x830 [ 2868.944163][ T1146] ? lock_is_held_type+0xb0/0xe0 [ 2868.944184][ T1146] do_filp_open+0x17e/0x3c0 [ 2868.944201][ T1146] ? may_open_dev+0xf0/0xf0 [ 2868.944224][ T1146] ? do_raw_spin_lock+0x120/0x2b0 [ 2868.944246][ T1146] ? rwlock_bug.part.0+0x90/0x90 [ 2868.944268][ T1146] ? _raw_spin_unlock+0x24/0x40 [ 2868.944282][ T1146] ? __alloc_fd+0x28d/0x600 [ 2868.944304][ T1146] do_sys_openat2+0x16f/0x3b0 [ 2868.944319][ T1146] ? __might_fault+0x190/0x1d0 [ 2868.944334][ T1146] ? build_open_flags+0x650/0x650 [ 2868.944355][ T1146] ? put_old_timespec32+0x101/0x1f0 [ 2868.944372][ T1146] ? get_old_timespec32+0x1f0/0x1f0 [ 2868.944392][ T1146] __ia32_compat_sys_openat+0x13f/0x1f0 [ 2868.944408][ T1146] ? __x32_compat_sys_open+0x1c0/0x1c0 [ 2868.944428][ T1146] ? lock_is_held_type+0xb0/0xe0 [ 2868.944445][ T1146] ? do_fast_syscall_32+0x40/0x120 [ 2868.944468][ T1146] do_syscall_32_irqs_on+0x3f/0x60 [ 2868.944485][ T1146] do_fast_syscall_32+0x7f/0x120 [ 2868.944503][ T1146] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2868.944516][ T1146] RIP: 0023:0xf7fc3569 [ 2868.944522][ T1146] Code: Bad RIP value. [ 2868.944531][ T1146] RSP: 002b:00000000f5d9d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2868.944547][ T1146] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 2868.944556][ T1146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2868.944565][ T1146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2868.944574][ T1146] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2868.944583][ T1146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2868.944607][ T1146] [ 2868.944607][ T1146] Showing all locks held in the system: [ 2868.944620][ T1146] 1 lock held by khungtaskd/1146: [ 2868.944625][ T1146] #0: ffffffff89bc11c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 2868.944689][ T1146] 1 lock held by in:imklog/6673: [ 2868.944694][ T1146] #0: ffff8880a686daf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 2868.944728][ T1146] 2 locks held by agetty/6751: [ 2868.944733][ T1146] #0: ffff8880945c7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2868.944764][ T1146] #1: ffffc900012002e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x223/0x1a30 [ 2868.944842][ T1146] 2 locks held by syz-executor.0/16933: [ 2868.944852][ T1146] 1 lock held by syz-executor.0/16938: [ 2868.944856][ T1146] #0: ffff8880a3ee3078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 2868.944888][ T1146] [ 2868.944893][ T1146] ============================================= [ 2868.944893][ T1146] [ 2868.944901][ T1146] NMI backtrace for cpu 1 [ 2868.944915][ T1146] CPU: 1 PID: 1146 Comm: khungtaskd Not tainted 5.8.0-rc4-syzkaller #0 [ 2868.944924][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.944928][ T1146] Call Trace: [ 2868.944944][ T1146] dump_stack+0x18f/0x20d [ 2868.944965][ T1146] nmi_cpu_backtrace.cold+0x70/0xb1 [ 2868.944983][ T1146] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 2868.945000][ T1146] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 2868.945016][ T1146] watchdog+0xd7d/0x1000 [ 2868.945034][ T1146] ? reset_hung_task_detector+0x30/0x30 [ 2868.945050][ T1146] kthread+0x3b5/0x4a0 [ 2868.945064][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 2868.945078][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 2868.945095][ T1146] ret_from_fork+0x1f/0x30 [ 2868.945118][ T1146] Sending NMI from CPU 1 to CPUs 0: [ 2868.945684][ C0] NMI backtrace for cpu 0 [ 2868.945689][ C0] CPU: 0 PID: 16933 Comm: syz-executor.0 Not tainted 5.8.0-rc4-syzkaller #0 [ 2868.945695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.945698][ C0] RIP: 0010:write_comp_data+0x2f/0x80 [ 2868.945708][ C0] Code: 05 e6 4b 8e 7e 65 48 8b 34 25 00 ff 01 00 a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 86 04 14 00 00 85 c0 74 4f 8b 86 e0 13 00 00 <83> f8 03 75 44 48 8b 86 e8 13 00 00 8b b6 e4 13 00 00 4c 8b 00 48 [ 2868.945712][ C0] RSP: 0018:ffffc90004e074d8 EFLAGS: 00000246 [ 2868.945719][ C0] RAX: 0000000000000002 RBX: 0000000000000006 RCX: ffffffff83c65d94 [ 2868.945723][ C0] RDX: 0000000000000005 RSI: ffff888054528340 RDI: 0000000000000004 [ 2868.945733][ C0] RBP: 0000000000000005 R08: 0000000000000001 R09: ffff8880a3614a9f [ 2868.945737][ C0] R10: 0000000000000006 R11: 0000000000000000 R12: ffff8880000a0005 [ 2868.945742][ C0] R13: ffff8880000a0000 R14: 0000000000000000 R15: 0000000078261868 [ 2868.945747][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0063) knlGS:00000000f5dbeb40 [ 2868.945751][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2868.945755][ C0] CR2: 00000000092341b4 CR3: 000000003a96a000 CR4: 00000000001426f0 [ 2868.945759][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2868.945764][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2868.945766][ C0] Call Trace: [ 2868.945769][ C0] vga16fb_fillrect+0x9d4/0x193b [ 2868.945772][ C0] ? memcpy+0x39/0x60 [ 2868.945775][ C0] bit_clear_margins+0x2d5/0x4a0 [ 2868.945778][ C0] ? bit_bmove+0x210/0x210 [ 2868.945781][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 2868.945784][ C0] fbcon_clear_margins+0x1d5/0x230 [ 2868.945787][ C0] fbcon_switch+0xb6e/0x16c0 [ 2868.945790][ C0] ? fbcon_scroll+0x3600/0x3600 [ 2868.945793][ C0] ? fbcon_cursor+0x52b/0x650 [ 2868.945797][ C0] ? kmalloc_array.constprop.0+0x20/0x20 [ 2868.945800][ C0] ? is_console_locked+0x5/0x10 [ 2868.945803][ C0] ? fbcon_set_origin+0x26/0x50 [ 2868.945805][ C0] redraw_screen+0x2ae/0x770 [ 2868.945809][ C0] ? vga16fb_update_fix+0x4a0/0x4a0 [ 2868.945811][ C0] ? vc_init+0x440/0x440 [ 2868.945814][ C0] ? fbcon_set_palette+0x3a8/0x490 [ 2868.945817][ C0] fbcon_modechanged+0x575/0x710 [ 2868.945820][ C0] fbcon_update_vcs+0x3a/0x50 [ 2868.945823][ C0] fb_set_var+0xae8/0xd60 [ 2868.945826][ C0] ? fb_blank+0x190/0x190 [ 2868.945829][ C0] ? lock_release+0x8d0/0x8d0 [ 2868.945832][ C0] ? lock_is_held_type+0xb0/0xe0 [ 2868.945835][ C0] ? do_fb_ioctl+0x2f2/0x6c0 [ 2868.945838][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 2868.945842][ C0] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 2868.945845][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 2868.945848][ C0] do_fb_ioctl+0x33f/0x6c0 [ 2868.945851][ C0] ? fb_set_suspend+0x1a0/0x1a0 [ 2868.945854][ C0] ? lock_downgrade+0x820/0x820 [ 2868.945857][ C0] ? trace_hardirqs_on+0x5f/0x220 [ 2868.945860][ C0] ? lockdep_hardirqs_on+0x6a/0xe0 [ 2868.945863][ C0] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2868.945867][ C0] ? tomoyo_execute_permission+0x470/0x470 [ 2868.945870][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2868.945874][ C0] ? do_vfs_ioctl+0x27d/0x1090 [ 2868.945877][ C0] ? generic_block_fiemap+0x60/0x60 [ 2868.945880][ C0] fb_compat_ioctl+0x175/0xc10 [ 2868.945882][ C0] ? fb_open+0x430/0x430 [ 2868.945885][ C0] ? __fget_files+0x294/0x400 [ 2868.945888][ C0] ? fb_open+0x430/0x430 [ 2868.945891][ C0] __do_compat_sys_ioctl+0x1d3/0x230 [ 2868.945894][ C0] do_syscall_32_irqs_on+0x3f/0x60 [ 2868.945897][ C0] do_fast_syscall_32+0x7f/0x120 [ 2868.945901][ C0] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2868.945904][ C0] RIP: 0023:0xf7fc3569 [ 2868.945906][ C0] Code: Bad RIP value. [ 2868.945910][ C0] RSP: 002b:00000000f5dbe0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2868.945917][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004601 [ 2868.945922][ C0] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2868.945926][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2868.945930][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2868.945935][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2868.953392][ T1146] Kernel panic - not syncing: hung_task: blocked tasks [ 2868.953408][ T1146] CPU: 1 PID: 1146 Comm: khungtaskd Not tainted 5.8.0-rc4-syzkaller #0 [ 2868.953416][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.953420][ T1146] Call Trace: [ 2868.953440][ T1146] dump_stack+0x18f/0x20d [ 2868.953459][ T1146] panic+0x2e3/0x75c [ 2868.953475][ T1146] ? __warn_printk+0xf3/0xf3 [ 2868.953492][ T1146] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 2868.953508][ T1146] ? preempt_schedule_thunk+0x16/0x18 [ 2868.953522][ T1146] ? watchdog.cold+0x5/0x16b [ 2868.953533][ T1146] ? watchdog+0xa82/0x1000 [ 2868.953548][ T1146] watchdog.cold+0x16/0x16b [ 2868.953565][ T1146] ? reset_hung_task_detector+0x30/0x30 [ 2868.953580][ T1146] kthread+0x3b5/0x4a0 [ 2868.953593][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 2868.953605][ T1146] ? __kthread_bind_mask+0xc0/0xc0 [ 2868.953621][ T1146] ret_from_fork+0x1f/0x30 [ 2868.955332][ T1146] Kernel Offset: disabled [ 2870.001223][ T1146] Rebooting in 86400 seconds..