[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.


Debian GNU/Linux 9 syzkaller ttyS0

syzkaller login: [   25.671611][ T8610] scp (8610) used greatest stack depth: 10328 bytes left
Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts.
2020/06/18 15:29:12 fuzzer started
2020/06/18 15:29:12 dialing manager at 10.128.0.105:45279
2020/06/18 15:29:16 syscalls: 3090
2020/06/18 15:29:16 code coverage: enabled
2020/06/18 15:29:16 comparison tracing: enabled
2020/06/18 15:29:16 extra coverage: enabled
2020/06/18 15:29:16 setuid sandbox: enabled
2020/06/18 15:29:16 namespace sandbox: enabled
2020/06/18 15:29:16 Android sandbox: /sys/fs/selinux/policy does not exist
2020/06/18 15:29:16 fault injection: enabled
2020/06/18 15:29:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/06/18 15:29:16 net packet injection: enabled
2020/06/18 15:29:16 net device setup: enabled
2020/06/18 15:29:16 concurrency sanitizer: enabled
2020/06/18 15:29:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/06/18 15:29:16 USB emulation: enabled
2020/06/18 15:29:18 suppressing KCSAN reports in functions: 'blk_mq_rq_ctx_init' 'kauditd_thread' 'expire_timers' 'do_signal_stop' 'do_select' 'n_tty_receive_buf_common' 'do_epoll_wait' 'generic_write_end' 'ext4_mb_find_by_goal' 'ext4_free_inode' 'generic_file_buffered_read' 'fsnotify' 'copy_process' 'dd_has_work' 'ext4_free_inodes_count' 'find_get_pages_range_tag' '__mod_timer' 'kcm_rfree' '__ext4_new_inode' '__xa_clear_mark' '__send_signal' 'futex_wait_queue_me' '__xa_set_mark' 'blk_mq_sched_dispatch_requests' '__find_get_block' 'alloc_pid' 'shmem_file_read_iter' 'pcpu_alloc' 'lru_add_drain_all' 'ext4_mark_iloc_dirty' '__blkdev_put' 'page_counter_charge' 'blk_mq_dispatch_rq_list' 'vfs_readlink' 
15:30:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0)

[   82.984380][ T8652] IPVS: ftp: loaded support on port[0] = 21
[   83.050127][ T8652] chnl_net:caif_netlink_parms(): no params data found
15:30:03 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90)

[   83.095324][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.116580][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.126479][ T8652] device bridge_slave_0 entered promiscuous mode
[   83.134581][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.141883][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.149540][ T8652] device bridge_slave_1 entered promiscuous mode
[   83.165593][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.176342][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.194576][ T8652] team0: Port device team_slave_0 added
[   83.201880][ T8652] team0: Port device team_slave_1 added
[   83.215676][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.222941][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.249627][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.269224][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.276278][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.302855][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.318353][ T8806] IPVS: ftp: loaded support on port[0] = 21
15:30:03 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @pix_mp})

[   83.409387][ T8652] device hsr_slave_0 entered promiscuous mode
[   83.488229][ T8652] device hsr_slave_1 entered promiscuous mode
15:30:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0)

[   83.559665][ T8838] IPVS: ftp: loaded support on port[0] = 21
[   83.653998][ T8806] chnl_net:caif_netlink_parms(): no params data found
[   83.719591][ T8652] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.759503][ T8652] netdevsim netdevsim0 netdevsim1: renamed from eth1
15:30:04 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000240)={0x9})

[   83.844479][ T9002] IPVS: ftp: loaded support on port[0] = 21
[   83.852661][ T8652] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.900081][ T8652] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.957225][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.965953][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.973846][ T8806] device bridge_slave_0 entered promiscuous mode
[   83.981755][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.988802][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.996196][ T8806] device bridge_slave_1 entered promiscuous mode
[   84.015610][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.022663][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.029906][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.036916][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.048932][ T9056] IPVS: ftp: loaded support on port[0] = 21
15:30:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000040)=@in={0x10}, 0x10)

[   84.063524][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.071986][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.081339][ T8838] chnl_net:caif_netlink_parms(): no params data found
[   84.105364][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.131786][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.193211][ T8806] team0: Port device team_slave_0 added
[   84.226079][ T8806] team0: Port device team_slave_1 added
[   84.241933][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.249698][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.257097][ T8838] device bridge_slave_0 entered promiscuous mode
[   84.281346][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.288568][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.295959][ T8838] device bridge_slave_1 entered promiscuous mode
[   84.309748][ T9002] chnl_net:caif_netlink_parms(): no params data found
[   84.318949][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.325884][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.352698][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.364853][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.366352][ T9224] IPVS: ftp: loaded support on port[0] = 21
[   84.373151][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.403986][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.428651][ T8838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.449480][ T9056] chnl_net:caif_netlink_parms(): no params data found
[   84.461816][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.472329][ T8838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.495241][ T8838] team0: Port device team_slave_0 added
[   84.539472][ T8806] device hsr_slave_0 entered promiscuous mode
[   84.587988][ T8806] device hsr_slave_1 entered promiscuous mode
[   84.627838][ T8806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.635399][ T8806] Cannot create hsr debugfs directory
[   84.654118][ T8838] team0: Port device team_slave_1 added
[   84.667097][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.675265][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.701463][ T8838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.714409][ T8838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.721584][ T8838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.748097][ T8838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.766964][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.775654][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.784524][ T8652] 8021q: adding VLAN 0 to HW filter on device team0
[   84.833911][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.841002][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.848900][ T9056] device bridge_slave_0 entered promiscuous mode
[   84.856732][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.863998][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.871481][ T9056] device bridge_slave_1 entered promiscuous mode
[   84.879415][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.888889][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.897208][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.904274][ T9091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.913648][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.922339][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.930990][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.938015][ T9091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.945701][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.989091][ T8838] device hsr_slave_0 entered promiscuous mode
[   85.017792][ T8838] device hsr_slave_1 entered promiscuous mode
[   85.068639][ T8838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.076195][ T8838] Cannot create hsr debugfs directory
[   85.090741][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.112015][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.120177][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.128602][ T9002] device bridge_slave_0 entered promiscuous mode
[   85.141488][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.165401][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.173601][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.181463][ T9002] device bridge_slave_1 entered promiscuous mode
[   85.189208][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.207140][ T9056] team0: Port device team_slave_0 added
[   85.212948][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.221184][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.230069][ T9224] chnl_net:caif_netlink_parms(): no params data found
[   85.246011][ T9056] team0: Port device team_slave_1 added
[   85.259589][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.284854][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.295137][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.302160][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.331329][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.343274][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.350618][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.376764][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.393185][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.403359][ T8806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.469709][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.478200][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.550055][ T9056] device hsr_slave_0 entered promiscuous mode
[   85.587801][ T9056] device hsr_slave_1 entered promiscuous mode
[   85.647554][ T9056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.655105][ T9056] Cannot create hsr debugfs directory
[   85.678888][ T8806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.738844][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.747057][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.756686][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.765271][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.775135][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   85.796308][ T9224] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.803852][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.811831][ T9224] device bridge_slave_0 entered promiscuous mode
[   85.821613][ T9224] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.828854][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.836199][ T9224] device bridge_slave_1 entered promiscuous mode
[   85.843885][ T8806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.889149][ T8806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.947960][ T9002] team0: Port device team_slave_0 added
[   85.966695][ T9224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.979166][ T9224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.989019][ T9002] team0: Port device team_slave_1 added
[   86.002901][ T9224] team0: Port device team_slave_0 added
[   86.011374][ T9224] team0: Port device team_slave_1 added
[   86.037722][ T8838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.073688][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.088701][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.095664][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.121777][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.134443][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.142763][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.151435][ T8838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.203605][ T9224] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.211002][ T9224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.237915][ T9224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.249515][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.256455][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.282852][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.295214][ T8838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.339767][ T9056] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.379290][ T9224] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.386233][ T9224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.413038][ T9224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.469120][ T9224] device hsr_slave_0 entered promiscuous mode
[   86.497514][ T9224] device hsr_slave_1 entered promiscuous mode
[   86.537382][ T9224] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.544960][ T9224] Cannot create hsr debugfs directory
[   86.558507][ T8838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.599223][ T9056] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.639181][ T9056] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.689253][ T9056] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.788977][ T9002] device hsr_slave_0 entered promiscuous mode
[   86.827539][ T9002] device hsr_slave_1 entered promiscuous mode
[   86.867322][ T9002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.874979][ T9002] Cannot create hsr debugfs directory
[   86.912187][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.921065][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.972661][ T8652] device veth0_vlan entered promiscuous mode
[   86.983401][ T8652] device veth1_vlan entered promiscuous mode
[   86.991535][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.999884][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.008957][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.016745][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.024690][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.035865][ T9224] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   87.094842][ T9224] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   87.139638][ T9224] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   87.179073][ T9224] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.243309][ T8838] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.257098][ T8652] device veth0_macvtap entered promiscuous mode
[   87.264475][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.273685][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.282229][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.292712][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.318229][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.325636][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.334445][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.342330][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.352515][ T9002] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.419188][ T9002] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.470660][ T9002] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.529117][ T9002] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.570074][ T8652] device veth1_macvtap entered promiscuous mode
[   87.582232][ T8806] 8021q: adding VLAN 0 to HW filter on device team0
[   87.593707][ T8838] 8021q: adding VLAN 0 to HW filter on device team0
[   87.601501][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.609280][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.616740][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.625053][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.647264][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.647593][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.664673][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.671708][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.679580][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.688033][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.696210][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.703237][ T5023] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.711222][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.721353][ T9056] 8021q: adding VLAN 0 to HW filter on device team0
[   87.732041][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.745398][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.753440][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.762289][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.771084][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.778123][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.786072][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.794688][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.803534][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.812114][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.820513][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.827543][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.835191][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.843911][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.852310][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.860669][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.867726][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.875399][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.883852][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.892257][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.908582][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.916371][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.924300][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.932380][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.941369][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.949920][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.956973][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.964983][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.973553][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.981981][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.993472][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.059376][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   88.068063][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   88.076446][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.085672][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.094163][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.103015][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.111410][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.120151][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.128690][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.137412][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.145475][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.153814][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.162196][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.170582][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.182003][ T8806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.193901][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.230938][ T8838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.238909][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.246958][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.255316][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.280419][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.348170][ T9224] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.355308][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.367086][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.379549][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.388373][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
15:30:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0)

[   88.431270][ T9056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.443056][ T9056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.469046][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.476760][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.489065][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.498096][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.506505][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.515535][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.524662][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.533627][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.542227][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.550817][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.558583][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.566096][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
15:30:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0)

[   88.578912][ T9224] 8021q: adding VLAN 0 to HW filter on device team0
[   88.590428][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.602926][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.611468][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.627426][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.645341][ T8806] device veth0_vlan entered promiscuous mode
[   88.666421][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0
15:30:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0)

[   88.683556][ T9002] 8021q: adding VLAN 0 to HW filter on device team0
[   88.706785][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.716252][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.737706][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.745074][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.766657][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.775624][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.784192][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.791279][ T9907] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.799209][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.806763][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.814421][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.822205][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
15:30:09 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045505, &(0x7f0000000000)=0x2e5)

[   88.831224][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.843944][ T8806] device veth1_vlan entered promiscuous mode
[   88.860910][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   88.870726][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.880055][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.890765][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.897867][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.908897][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.917563][ T9927] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #741
[   88.929968][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
15:30:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[   88.952501][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.959652][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.967846][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.976241][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.988347][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.995383][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.005331][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.014803][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   89.049420][ T8838] device veth0_vlan entered promiscuous mode
[   89.055757][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   89.065327][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   89.073012][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.081707][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.090220][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.098832][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.106729][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.115151][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.123547][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.147460][ T9935] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   89.155748][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.168156][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.175794][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.185553][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.194988][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.205113][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.213937][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   89.222778][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   89.231558][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.240319][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.249003][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.257478][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.265493][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.274035][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.286739][ T8838] device veth1_vlan entered promiscuous mode
15:30:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[   89.295932][ T9224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.303956][ T9932] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   89.319273][ T8806] device veth0_macvtap entered promiscuous mode
[   89.335543][ T9002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.356664][ T9002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.378516][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   89.387488][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   89.395339][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.406644][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.415450][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.424313][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.432608][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.440932][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.449158][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.478632][ T8806] device veth1_macvtap entered promiscuous mode
[   89.490353][ T9939] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   89.509776][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.517721][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
15:30:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[   89.526138][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.534932][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.542869][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.568722][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.579156][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.592688][ T8838] device veth0_macvtap entered promiscuous mode
[   89.601251][ T9224] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.615293][ T8806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   89.626818][ T8806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.638260][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.651743][ T9056] device veth0_vlan entered promiscuous mode
[   89.662833][ T9943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   89.688451][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.696330][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   89.701310][ T9943] syz-executor.0 (9943) used greatest stack depth: 10184 bytes left
[   89.705131][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   89.720603][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   89.735197][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   89.743765][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   89.752457][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   89.760011][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   89.769302][ T8838] device veth1_macvtap entered promiscuous mode
[   89.778391][ T8806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   89.790414][ T8806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.801224][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.813417][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.821858][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   89.830096][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   89.838092][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.846633][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.863630][ T8838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   89.875731][ T8838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.885946][ T8838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   89.896741][ T8838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.907614][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.915856][ T9056] device veth1_vlan entered promiscuous mode
[   89.977771][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   89.985695][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   89.993977][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.002803][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.011630][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.020325][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.031059][ T8838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   90.041790][ T8838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.051977][ T8838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   90.062433][ T8838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.072901][ T8838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.085144][ T9224] device veth0_vlan entered promiscuous mode
[   90.128751][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.137666][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.146127][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.154310][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.162761][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.170678][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.183401][ T9224] device veth1_vlan entered promiscuous mode
[   90.246772][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.267155][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   90.275612][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.301126][ T9056] device veth0_macvtap entered promiscuous mode
[   90.409294][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.418921][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.427385][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.440260][ T9002] device veth0_vlan entered promiscuous mode
[   90.449159][ T9056] device veth1_macvtap entered promiscuous mode
15:30:11 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90)

15:30:11 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @pix_mp})

[   90.477027][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.485231][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.501425][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.520859][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.531746][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.559613][ T9002] device veth1_vlan entered promiscuous mode
[   90.566920][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.574851][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.585430][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.605722][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   90.616265][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.628267][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   90.639738][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.651441][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   90.662512][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.686053][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.694241][ T9224] device veth0_macvtap entered promiscuous mode
[   90.708181][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.716020][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.724031][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.732926][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.745712][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   90.756531][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.768978][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   90.779395][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.789225][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   90.799755][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.811352][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.825318][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.834398][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.880195][ T9224] device veth1_macvtap entered promiscuous mode
[   90.888457][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.896288][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.904962][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.913865][ T9002] device veth0_macvtap entered promiscuous mode
[   91.020895][ T9002] device veth1_macvtap entered promiscuous mode
[   91.032624][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.045290][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.060783][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.071867][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.084189][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.103678][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.114039][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.124555][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.135498][ T9224] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.147043][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.154902][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.163786][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.172266][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.190201][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.201118][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.212649][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.223068][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.233317][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.244232][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.255125][ T9224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.265551][ T9224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.276482][ T9224] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.286653][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.297447][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.307550][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.318384][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.328520][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.339914][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.350213][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.360817][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.370900][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   91.381648][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.392601][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.401997][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.410787][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.419440][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.428151][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.519470][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.530041][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.540026][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.550464][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.560555][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.570990][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.581327][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.591765][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.601685][ T9002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   91.612206][ T9002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.623137][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.630497][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.640099][ T9100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.861842][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   91.898808][ T9985] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
15:30:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0)

15:30:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

15:30:12 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @pix_mp})

15:30:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90)

15:30:12 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000240)={0x9})

15:30:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000040)=@in={0x10}, 0x10)

[   91.907006][ T9985] HTB: quantum of class FFFF0900 is big. Consider r2q change.
[   91.915586][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:30:12 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000240)={0x9})

15:30:12 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @pix_mp})

15:30:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000040)=@in={0x10}, 0x10)

15:30:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90)

[   91.984572][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   92.011269][T10000] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
15:30:12 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000240)={0x9})

15:30:12 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300))
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

[   92.071632][T10000] syz-executor.0 (10000) used greatest stack depth: 10056 bytes left
[   92.111659][T10010] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[   92.163431][T10010] HTB: quantum of class FFFF0900 is big. Consider r2q change.
15:30:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0)

15:30:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)

15:30:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000040)=@in={0x10}, 0x10)

15:30:12 executing program 4:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r0, 0x7ffffc, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000800)=ANY=[], 0x9)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x78c14229, 0x0, 0x0, 0x1, [{}]})

15:30:12 executing program 1:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

[   92.263427][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   92.288793][    C0] hrtimer: interrupt took 36777 ns
15:30:12 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)

[   92.311162][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   92.350917][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:30:12 executing program 4:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r0, 0x7ffffc, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000800)=ANY=[], 0x9)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x78c14229, 0x0, 0x0, 0x1, [{}]})

15:30:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)

15:30:13 executing program 1:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

[   92.376008][T10036] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[   92.396115][T10036] HTB: quantum of class FFFF0900 is big. Consider r2q change.
15:30:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

15:30:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)

[   92.463725][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   92.562255][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
15:30:13 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300))
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

15:30:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r5, 0x4, 0x42800)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x108, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x900}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x36, 0x1, [@m_mirred={0xd0, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x1b, 0x6, "3c0a793afd329cce9533c4396b8dcc136902ea634a913e"}}}]}]}}]}, 0x108}}, 0x0)

15:30:13 executing program 4:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r0, 0x7ffffc, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000800)=ANY=[], 0x9)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x78c14229, 0x0, 0x0, 0x1, [{}]})

15:30:13 executing program 1:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

15:30:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

15:30:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)

[   93.038226][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   93.050988][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:30:13 executing program 4:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
lseek(r0, 0x7ffffc, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000800)=ANY=[], 0x9)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x78c14229, 0x0, 0x0, 0x1, [{}]})

15:30:13 executing program 1:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

15:30:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f6500"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x78)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r4 = open(0x0, 0x0, 0x0)
write$binfmt_elf64(r3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x40a0, 0x8, 0x4, 0x6, 0x3, 0x0, 0x428b}, 0x0, 0x8, 0xffffffffffffffff, 0xb)
finit_module(r4, 0x0, 0x0)

[   93.094563][T10071] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[   93.117990][T10071] HTB: quantum of class FFFF0900 is big. Consider r2q change.
15:30:13 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x6, 0x1e, &(0x7f0000000440)={@private, @remote}, 0xc)

15:30:13 executing program 0:
r0 = memfd_create(&(0x7f00000000c0), 0x0)
ftruncate(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x5, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x11, r3, 0x2)
io_setup(0x4, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])

15:30:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x18, r2, 0x703, 0x0, 0x0, {0x6}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)

15:30:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300))
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

15:30:14 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100003f00)

15:30:14 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x6, 0x1e, &(0x7f0000000440)={@private, @remote}, 0xc)

15:30:14 executing program 0:
r0 = memfd_create(&(0x7f00000000c0), 0x0)
ftruncate(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x5, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x11, r3, 0x2)
io_setup(0x4, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])

15:30:14 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x18, r2, 0x703, 0x0, 0x0, {0x6}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)

15:30:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100003f00)

15:30:14 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x6, 0x1e, &(0x7f0000000440)={@private, @remote}, 0xc)

15:30:14 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x18, r2, 0x703, 0x0, 0x0, {0x6}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)

15:30:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100003f00)

15:30:14 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x6, 0x1e, &(0x7f0000000440)={@private, @remote}, 0xc)

15:30:14 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:14 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300))
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

15:30:14 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x100003f00)

15:30:14 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:14 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x18, r2, 0x703, 0x0, 0x0, {0x6}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)

15:30:14 executing program 0:
r0 = memfd_create(&(0x7f00000000c0), 0x0)
ftruncate(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x5, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x11, r3, 0x2)
io_setup(0x4, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])

15:30:14 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:14 executing program 5:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x10d, 0xc, 0x0, &(0x7f0000000100)=0x300)

15:30:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:14 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:14 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:15 executing program 0:
r0 = memfd_create(&(0x7f00000000c0), 0x0)
ftruncate(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$nl_audit(0x10, 0x3, 0x9)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x5, &(0x7f00000000c0))
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x11, r3, 0x2)
io_setup(0x4, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}])

15:30:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:15 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = dup2(r0, r0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/212, 0xd4}], 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:30:15 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}]}}}]}, 0x3c}}, 0x0)

15:30:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:15 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

15:30:15 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

[   95.083647][T10223] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[   95.095191][T10223] netlink: 'syz-executor.1': attribute type 39 has an invalid length.
15:30:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

15:30:15 executing program 3:
set_mempolicy(0x3, &(0x7f00000000c0)=0x6, 0x7f)
getcwd(&(0x7f0000000000)=""/179, 0xb3)

15:30:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

15:30:15 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

15:30:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:15 executing program 3:
set_mempolicy(0x3, &(0x7f00000000c0)=0x6, 0x7f)
getcwd(&(0x7f0000000000)=""/179, 0xb3)

15:30:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

15:30:15 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

15:30:15 executing program 3:
set_mempolicy(0x3, &(0x7f00000000c0)=0x6, 0x7f)
getcwd(&(0x7f0000000000)=""/179, 0xb3)

15:30:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:16 executing program 3:
set_mempolicy(0x3, &(0x7f00000000c0)=0x6, 0x7f)
getcwd(&(0x7f0000000000)=""/179, 0xb3)

15:30:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0xd102})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0)
dup2(r0, r1)
r2 = gettid()
tkill(r2, 0x1000000000016)

15:30:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:16 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="2000000068001308000000f5a80300000200000000000000080001"], 0x20}}, 0x0)
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20000003, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x3f052c333fb6a28, 0x0)

15:30:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:17 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="2000000068001308000000f5a80300000200000000000000080001"], 0x20}}, 0x0)
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20000003, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x3f052c333fb6a28, 0x0)

[   96.397989][ T9907] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max
[   96.428059][ T9907] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:17 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="2000000068001308000000f5a80300000200000000000000080001"], 0x20}}, 0x0)
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20000003, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x3f052c333fb6a28, 0x0)

[   96.465474][ T9907] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max
[   96.503915][ T9907] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:17 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB="2000000068001308000000f5a80300000200000000000000080001"], 0x20}}, 0x0)
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20000003, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x3f052c333fb6a28, 0x0)

[   96.595292][ T5023] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max
[   96.624590][ T5023] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

[   97.047684][ T5023] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max
15:30:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000ecdf40e65cc780220000000000000000000000000000000300df0000000000000000000084000000000000000000000000000000000000000000000000200000000000000000000000000000000001000000000000000000000000000000000100258d7a3500000000000000000000000000000000000000000000feffffff00000000000000000000000000000074b6628ddfb1cc186d6300000000000000000073797a310000000000000000000000010000000000030000cf0a000000000000000000000900000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaba86b97eec0b2bed1ee23364b10d6aad51020000e2a1db3c6a31e30dee4a28054000393898804c41c2993fc67e8a146045e14e8a0800550e6a25975bc1a991cff61e88c45b91994478e79e71f1ff7fa373c0ef65f6ec71f0084254d19a8def1fc49bfc67ad9ba9a10cc4239a55232f5f40"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

[   97.112414][ T5023] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

[   97.199559][ T9907] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max
[   97.214872][ T5023] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max
[   97.232480][ T5023] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000ecdf40e65cc780220000000000000000000000000000000300df0000000000000000000084000000000000000000000000000000000000000000000000200000000000000000000000000000000001000000000000000000000000000000000100258d7a3500000000000000000000000000000000000000000000feffffff00000000000000000000000000000074b6628ddfb1cc186d6300000000000000000073797a310000000000000000000000010000000000030000cf0a000000000000000000000900000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaba86b97eec0b2bed1ee23364b10d6aad51020000e2a1db3c6a31e30dee4a28054000393898804c41c2993fc67e8a146045e14e8a0800550e6a25975bc1a991cff61e88c45b91994478e79e71f1ff7fa373c0ef65f6ec71f0084254d19a8def1fc49bfc67ad9ba9a10cc4239a55232f5f40"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

[   97.264000][ T9907] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
[   97.320277][ T5023] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max
[   97.336244][ T9907] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max
[   97.357230][ T9907] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

[   97.371272][ T5023] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
[   97.427320][ T5023] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max
[   97.449396][ T9907] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max
[   97.470206][ T9907] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
[   97.471566][ T5023] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x102, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540), 0x0, 0x0)

15:30:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:18 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff)
clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
link(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0/file0\x00')
ftruncate(r3, 0x0)

[   97.928772][ T9907] hid-generic 0000:0000:0000.000B: ignoring exceeding usage max
15:30:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x401000000001, 0x0)
close(0xffffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x82, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

15:30:18 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x12, 0x0, 0x0)

[   97.984733][ T9907] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:18 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x2}, 0x6)

15:30:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000019180)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0)

[   98.119732][ T9907] hid-generic 0000:0000:0000.000C: ignoring exceeding usage max
15:30:18 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x12, 0x0, 0x0)

15:30:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0xd31, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mpls={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}}}]}]}, 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x100000001)

[   98.171126][T10512] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.180081][ T9907] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
15:30:18 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x12, 0x0, 0x0)

15:30:18 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff)
clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
link(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0/file0\x00')
ftruncate(r3, 0x0)

[   98.250680][T10512] kvm: emulating exchange as write
[   98.347971][   T27] audit: type=1804 audit(1592494218.909:2): pid=10525 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir349678825/syzkaller.9Dxklb/28/cgroup.controllers" dev="sda1" ino=15797 res=1
[   98.379834][T10512] ==================================================================
[   98.387920][T10512] BUG: KCSAN: data-race in direct_page_fault / kvm_mmu_notifier_invalidate_range_end
[   98.397345][T10512] 
[   98.399676][T10512] write to 0xffffc90004162188 of 8 bytes by task 10532 on cpu 0:
[   98.407401][T10512]  kvm_mmu_notifier_invalidate_range_end+0x39/0xa0
[   98.413881][T10512]  __mmu_notifier_invalidate_range_end+0x18e/0x210
[   98.420372][T10512]  unmap_vmas+0x120/0x150
[   98.424702][T10512]  unmap_region+0x149/0x1e0
[   98.429207][T10512]  __do_munmap+0x74d/0xbf0
[   98.433601][T10512]  mmap_region+0x59a/0x1330
[   98.438081][T10512]  do_mmap+0x7ad/0xce0
[   98.442126][T10512]  vm_mmap_pgoff+0xed/0x170
[   98.446605][T10512]  ksys_mmap_pgoff+0x342/0x3a0
[   98.451346][T10512]  do_syscall_64+0x71/0x120
[   98.455827][T10512]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   98.461688][T10512] 
[   98.464016][T10512] read to 0xffffc90004162188 of 8 bytes by task 10512 on cpu 1:
[   98.471654][T10512]  direct_page_fault+0x162/0x670
[   98.476568][T10512]  kvm_tdp_page_fault+0x92/0xa0
[   98.481393][T10512]  kvm_mmu_page_fault+0xca/0x410
[   98.486309][T10512]  handle_ept_violation+0x232/0x5c0
[   98.491484][T10512]  vmx_handle_exit+0x554/0xb40
[   98.496227][T10512]  vcpu_enter_guest+0x189c/0x23e0
[   98.501227][T10512]  vcpu_run+0x26e/0x750
[   98.505384][T10512]  kvm_arch_vcpu_ioctl_run+0x38d/0x690
[   98.510839][T10512]  kvm_vcpu_ioctl+0x565/0x950
[   98.515491][T10512]  __se_sys_ioctl+0xc9/0x130
[   98.520076][T10512]  __x64_sys_ioctl+0x3f/0x50
[   98.524641][T10512]  do_syscall_64+0x71/0x120
[   98.529123][T10512]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   98.534985][T10512] 
[   98.537286][T10512] Reported by Kernel Concurrency Sanitizer on:
[   98.543417][T10512] CPU: 1 PID: 10512 Comm: syz-executor.2 Not tainted 5.8.0-rc1-syzkaller #0
[   98.552059][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   98.562107][T10512] ==================================================================
[   98.570142][T10512] Kernel panic - not syncing: panic_on_warn set ...
[   98.576708][T10512] CPU: 1 PID: 10512 Comm: syz-executor.2 Not tainted 5.8.0-rc1-syzkaller #0
[   98.585353][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   98.595384][T10512] Call Trace:
[   98.598658][T10512]  dump_stack+0x10f/0x19d
[   98.602990][T10512]  panic+0x1f8/0x63a
[   98.606864][T10512]  ? vprintk_emit+0x44a/0x4f0
[   98.611518][T10512]  kcsan_report+0x684/0x690
[   98.616028][T10512]  ? kcsan_setup_watchpoint+0x453/0x4d0
[   98.621550][T10512]  ? direct_page_fault+0x162/0x670
[   98.626656][T10512]  ? kvm_tdp_page_fault+0x92/0xa0
[   98.631660][T10512]  ? kvm_mmu_page_fault+0xca/0x410
[   98.636749][T10512]  ? handle_ept_violation+0x232/0x5c0
[   98.642095][T10512]  ? vmx_handle_exit+0x554/0xb40
[   98.647014][T10512]  ? vcpu_enter_guest+0x189c/0x23e0
[   98.652192][T10512]  ? vcpu_run+0x26e/0x750
[   98.656509][T10512]  ? kvm_arch_vcpu_ioctl_run+0x38d/0x690
[   98.662119][T10512]  ? kvm_vcpu_ioctl+0x565/0x950
[   98.666947][T10512]  ? __se_sys_ioctl+0xc9/0x130
[   98.671692][T10512]  ? __x64_sys_ioctl+0x3f/0x50
[   98.676442][T10512]  ? do_syscall_64+0x71/0x120
[   98.681103][T10512]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   98.687165][T10512]  kcsan_setup_watchpoint+0x453/0x4d0
[   98.692518][T10512]  direct_page_fault+0x162/0x670
[   98.697434][T10512]  kvm_tdp_page_fault+0x92/0xa0
[   98.702282][T10512]  kvm_mmu_page_fault+0xca/0x410
[   98.707199][T10512]  handle_ept_violation+0x232/0x5c0
[   98.712392][T10512]  ? vmx_handle_exit+0x54e/0xb40
[   98.717305][T10512]  ? handle_desc+0x60/0x60
[   98.721698][T10512]  vmx_handle_exit+0x554/0xb40
[   98.726471][T10512]  ? check_preemption_disabled+0x3f/0x1a0
[   98.732170][T10512]  vcpu_enter_guest+0x189c/0x23e0
[   98.737173][T10512]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[   98.743306][T10512]  ? vcpu_run+0x27c/0x750
[   98.747629][T10512]  ? vcpu_run+0x289/0x750
[   98.751940][T10512]  vcpu_run+0x26e/0x750
[   98.756078][T10512]  ? complete_emulated_pio+0xd0/0xd0
[   98.761344][T10512]  kvm_arch_vcpu_ioctl_run+0x38d/0x690
[   98.766780][T10512]  kvm_vcpu_ioctl+0x565/0x950
[   98.771434][T10512]  ? tomoyo_file_ioctl+0x1c/0x20
[   98.776348][T10512]  ? kvm_vm_ioctl_get_dirty_log+0x3d0/0x3d0
[   98.782218][T10512]  __se_sys_ioctl+0xc9/0x130
[   98.786785][T10512]  __x64_sys_ioctl+0x3f/0x50
[   98.791353][T10512]  do_syscall_64+0x71/0x120
[   98.795855][T10512]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   98.801722][T10512] RIP: 0033:0x45ca59
[   98.805595][T10512] Code: Bad RIP value.
[   98.809650][T10512] RSP: 002b:00007f28559acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.818036][T10512] RAX: ffffffffffffffda RBX: 00000000004e8560 RCX: 000000000045ca59
[   98.826011][T10512] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   98.833962][T10512] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[   98.841923][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[   98.849874][T10512] R13: 00000000000003cc R14: 00000000004c6799 R15: 00007f28559ad6d4
[   98.859110][T10512] Kernel Offset: disabled
[   98.863433][T10512] Rebooting in 86400 seconds..